Bio Basespace SDK Gem for Ruby Command Line API Key Disclosure

Bio Basespace SDK Gem for Ruby contains a flaw that is due to the API client code passing the APIKEY to a curl command. This may allow a local attacker to gain access to API key information by monitoring the process table...

CVE-2013-4425: Private key disclosure, Osirix (lite, 64bit and FDA cleader version) (Medical Application)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Private key disclosure, Osirix lite, 64bit and FDA cleader version CVE-2013-4425 version 1.09 CVSS Score: 8.4 Background: =========== OsiriX is an image processing software dedicated to DICOM images files with a ".dcm" / ".DCM" extension produced by...

CVE-2013-4476

Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controll...

PuTTY 0.52 to 0.62 Multiple Vulnerabilities

The remote host has an installation of PuTTY version 0.52 or greater but earlier than version 0.63. As such, it is reportedly affected by the following vulnerabilities : - An overflow error exists in the function 'modmul' in the file 'putty/sshbn.c' that could allow heap corruption when handling...

PT-2013-3530 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions 4.0.x through 4.2.x Description: The issue allows one domain to determine portions of the state of floating point instructions of other domains, potentially leading to the disclosure of sensitive information such as cryptographic...

Willing Webcam 2.8 Licence Info Disclosure Local Exploit

Exploit for unknown platform in category local exploits ======================================================== Willing Webcam 2.8 Licence Info Disclosure Local Exploit ======================================================== / Willing Webcam 2.8 licence info disclosure local exploit by Kozan...

Tectia SSH Server < 4.3.2 Local Key Disclosure

Binary data 3043.prm...

CVE-2003-1120

The CVE-2003-1120 entry concerns SSH Tectia Server 4.0.3 and 4.0.4 on Unix where the password-change plugin (ssh-passwd-plugin) is enabled. The vulnerability is a race condition that allows local users to obtain the server’s private key. The connected documents confirm the affected product and th...

CVE-2003-0971

GnuPG GPG 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 sign+encrypt keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature...

CVE-1999-0151

CVE-1999-0151 corresponds to the SATAN tool vulnerability where the session key can be disclosed if the user navigates the browser to other sites, potentially enabling root access. Connected sources confirm the issue affects SATAN and describe the risk of session key disclosure leading to elevate...