1144 matches found
GHSA-VG44-FW64-CPJX Incorrect Account Used for Signing
Impact Anybody using this library to sign with a BIP44 account other than the first account may be affected. If a user is signing with the first account i.e. the account at index 0, or with the legacy MEW/MyCrypto HD path, they are not affected. The vulnerability impacts cases where the user sign...
PT-2020-21518
Name of the Vulnerable Software and Affected Versions eth-ledger-bridge-keyring versions prior to 0.2.1 @metamask/eth-ledger-bridge-keyring versions prior to 0.2.2 Description The issue affects users who sign with a BIP44 account other than the first account. It impacts cases where a user signs a...
GHSA-P86X-652P-6385 Incorrect Default Permissions in keyring
Python keyring lib before 0.10 created keyring files with world-readable permissions...
Incorrect Default Permissions in keyring
Python keyring lib before 0.10 created keyring files with world-readable permissions...
Incorrect Default Permissions in keyring
Python keyring has insecure permissions on new databases, allowing world-readable files to be created...
EulerOS 2.0 SP5 : gnupg2 (EulerOS-SA-2020-1104)
According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allow...
SUSE-SU-2020:0413-1 Security update for enigmail
This update for enigmail fixes the following issues: enigmail was updated to 2.1.5: Security issue: unsigned MIME parts displayed as signed bsc1159973 Ensure that upgrading GnuPG 2.0.x to 2.2.x upgrade converts keyring format Make Enigmail Compatible with Protected-Headers spec, draft 2 enigmail...
Exploit for CVE-2016-0728
This repository is an offensive tool for Linux kernel exploitation. It contains exploits for various real-world kernel vulnerabilities, including CVE-2016-0728. The primary vulnerability being targeted is a REFCOUNT overflow/Use-After-Free in keyrings. The repository includes two exploit modules:...
CVE-2017-17807
The KEYS subsystem in the Linux kernel omitted an access-control check when writing a key to the current task's default keyring, allowing a local user to bypass security checks to the keyring. This compromises the validity of the keyring for those who rely on it...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2017-1159)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-20781
In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
DEBIAN-CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
UBUNTU-CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
Code injection
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-6111
gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...
CVE-2012-6111
CVE-2012-6111 affects gnome-keyring: when gnome_keyring_lock_all_sync is used, stored secrets are not discarded. Public metrics indicate confidentiality impact (C: partial per CVSS2; C:H per CVSS3). No exploitation details are provided in the connected documents, and remediation details are not s...
