331 matches found
PYSEC-2016-4
The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...
CVE-2016-0684
Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS...
Unspecified Vulnerability in Pivotal Software Spring Framework Java SockJS Client
Pivotal Software Spring Framework is the U.S. Pivotal Software, Inc. of a set of open source Java, Java EE application framework. The framework helps developers build high-quality applications . A security vulnerability exists in the Java SockJS client in Pivotal Software Spring Framework version...
acroread: multiple code execution flaws (APSB13-02)
Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors...
BELL-CVE-2012-0815 CVE-2012-0815 does not affect BellSoft software
Bulletin has no description...
openssl signature forgery
OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying...
CVE-2006-6248
index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message...
openssl signature forgery
OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying...
Eraser advisory :)
Advisory by Eraser 5 / Продукт: Aquonics File Manager 1.5 advisory 5 Уязвимость: 1.Обратный путь в директориях 2.Повышение прав доступа Разработчик программы: www.aquonics.com Опасность: высокая Дата: 19.07.02 / --Описание-- Aquonics File Manager 1.5 - расширенный файл мэнеджер. Через первую...
Cryptographic Issues
Overview Affected versions of this package are vulnerable to Cryptographic Issues. Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a...
2022-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 for ARM64 (KB5015730)
2022-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 for ARM64 KB5015730...