24 matches found
CVE-2015-3298
Yubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used. When first powered up, a signature will be issued even though the PIN has not been validated...
PT-2022-7826
Name of the Vulnerable Software and Affected Versions Yubico ykneo-openpgp versions prior to 1.0.10 Description The issue is caused by a typo, allowing an invalid PIN to be used. When the device is first powered up, a signature will be issued even though the PIN has not been validated...
CLSA-2022-1645466754 Fix of CVE: CVE-2021-43527
CVE-2021-43527: nss: Memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS - Pin validation date for PayPalEE test cert...
Amtote Homebet - Account Information Brute Force
source: https://www.securityfocus.com/bid/3371/info Homebet is an internet based betting application that is developed by Amtote International. A vulnerability exists in Homebet which could enable a non-registered user to confirm the validity of possible legitimate users and their PIN numbers...