1027 matches found
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2020-1563)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.2 : gnupg2 (EulerOS-SA-2020-1489)
According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to...
Authorization Bypass
kernel is vulnerable to authorization bypass. The vulnerability exists through missing permissions check for requestkey destination allows local attackers to add keys to keyring without Write permission...
kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission
The KEYS subsystem in the Linux kernel omitted an access-control check when writing a key to the current task's default keyring, allowing a local user to bypass security checks to the keyring. This compromises the validity of the keyring for those who rely on it...
kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission
The KEYS subsystem in the Linux kernel omitted an access-control check when writing a key to the current task's default keyring, allowing a local user to bypass security checks to the keyring. This compromises the validity of the keyring for those who rely on it...
Incorrect Account Used for Signing
Overview Versions of eth-ledger-bridge-keyring prior to 0.2.1 may use incorrect accounts for signing transactions. The vulnerability impacts cases where the user signs a personal message or transaction without first adding the account. This includes cases where the user has already added the...
GHSA-VG44-FW64-CPJX Incorrect Account Used for Signing
Impact Anybody using this library to sign with a BIP44 account other than the first account may be affected. If a user is signing with the first account i.e. the account at index 0, or with the legacy MEW/MyCrypto HD path, they are not affected. The vulnerability impacts cases where the user sign...
Incorrect Default Permissions in keyring
Python keyring lib before 0.10 created keyring files with world-readable permissions...
GHSA-P86X-652P-6385 Incorrect Default Permissions in keyring
Python keyring lib before 0.10 created keyring files with world-readable permissions...
Incorrect Default Permissions in keyring
Python keyring has insecure permissions on new databases, allowing world-readable files to be created...
EulerOS 2.0 SP5 : gnupg2 (EulerOS-SA-2020-1104)
According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allow...
SUSE-SU-2020:0413-1 Security update for enigmail
This update for enigmail fixes the following issues: enigmail was updated to 2.1.5: Security issue: unsigned MIME parts displayed as signed bsc1159973 Ensure that upgrading GnuPG 2.0.x to 2.2.x upgrade converts keyring format Make Enigmail Compatible with Protected-Headers spec, draft 2 enigmail...
Exploit for CVE-2016-0728
This repository is an offensive tool for Linux kernel exploitation. It contains exploits for various real-world kernel vulnerabilities, including CVE-2016-0728. The primary vulnerability being targeted is a REFCOUNT overflow/Use-After-Free in keyrings. The repository includes two exploit modules:...
CVE-2017-17807
The KEYS subsystem in the Linux kernel omitted an access-control check when writing a key to the current task's default keyring, allowing a local user to bypass security checks to the keyring. This compromises the validity of the keyring for those who rely on it...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2017-1159)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-20781
In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...
DEBIAN-CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
