The vulnerability of the RubyGems package management system lies in its improper verification of cryptographic signatures, allowing a hacker to execute arbitrary code.

The vulnerability of the RubyGems package management system is related to improper verification of the cryptographic signatures of packages. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2018-7711: Improper Verification of Cryptographic Signature

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP...

CVE-2017-8177: Improper Verification of Cryptographic Signature

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking...

CVE-2017-16852: Improper Verification of Cryptographic Signature

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...

CVE-2014-9934: Improper Verification of Cryptographic Signature

A PKCS1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding...

OpenSSL 0.9.8 < 0.9.8y Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 0.9.8y. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.8y advisory. - OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP...

CVE-2002-1706: Improper Verification of Cryptographic Signature

Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is approved by th...