Lucene search
+L

124 matches found

NVD
NVD
added 2019/07/25 2:15 p.m.17 views

CVE-2019-1010161

perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security token, line 614 in decodejws. The attack vector is: network connectivitycrafting user-controlled input to bypass authentication. The fixed...

9.8CVSS9.6AI score0.01103EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/07/25 2:15 p.m.48 views

CVE-2019-1010161

perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security token, line 614 in decodejws. The attack vector is: network connectivitycrafting user-controlled input to bypass authentication. The fixed...

9.8CVSS7.2AI score0.01103EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/07/25 1:17 p.m.66 views

CVE-2019-1010161

perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security token, line 614 in decodejws. The attack vector is: network connectivitycrafting user-controlled input to bypass authentication. The fixed...

9.8CVSS9.7AI score0.01103EPSS
SaveExploits0
OSV
OSV
added 2019/07/17 9:15 p.m.18 views

CVE-2019-1010263

Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac. The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit...

9.8CVSS7.1AI score
SaveExploits0References2
NVD
NVD
added 2019/07/17 9:15 p.m.19 views

CVE-2019-1010263

Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac. The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit...

9.8CVSS9.7AI score0.01312EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2019/07/17 9:15 p.m.33 views

CVE-2019-1010263

Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac. The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit...

9.8CVSS7.2AI score0.01312EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2019/07/17 8:32 p.m.49 views

CVE-2019-1010263

Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac. The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit...

9.8CVSS9.7AI score0.01312EPSS
SaveExploits1
securityvulns
securityvulns
added 2013/10/02 12:00 a.m.69 views

[ MDVSA-2013:241 ] perl-Crypt-DSA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:241 http://www.mandriva.com/en/support/security/ Package : perl-Crypt-DSA Date : September 25, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discover...

5.8CVSS6.2AI score0.01958EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2013/09/26 12:00 a.m.24 views

Mandriva Linux Security Advisory : perl-Crypt-DSA (MDVSA-2013:241)

A vulnerability has been discovered and corrected in perl-Crypt-DSA : The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed...

5.8CVSS5.4AI score0.01958EPSS
SaveExploits0References1
OSV
OSV
added 2013/09/24 9:40 p.m.14 views

MGASA-2013-0289 Updated perl-Crypt-DSA package fixes security vulnerability

The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack CVE-2011-3599. This update removes t...

5.8CVSS6.3AI score0.01958EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2013/09/18 12:00 a.m.22 views

Fedora Update for perl-Crypt-DSA FEDORA-2013-15755

Check for the Version of perl-Crypt-DSA OpenVAS Vulnerability Test Fedora Update for perl-Crypt-DSA FEDORA-2013-15755 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

5.8CVSS6.4AI score0.01958EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/09/18 12:00 a.m.12 views

Fedora Update for perl-Crypt-DSA FEDORA-2013-15786

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.5AI score0.01958EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/09/18 12:00 a.m.22 views

Fedora Update for perl-Crypt-DSA FEDORA-2013-15786

Check for the Version of perl-Crypt-DSA OpenVAS Vulnerability Test Fedora Update for perl-Crypt-DSA FEDORA-2013-15786 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

5.8CVSS6.4AI score0.01958EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/09/18 12:00 a.m.12 views

Fedora Update for perl-Crypt-DSA FEDORA-2013-15755

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.5AI score0.01958EPSS
SaveExploits0References2
Fedora
Fedora
added 2013/09/13 1:11 a.m.33 views

[SECURITY] Fedora 18 Update: perl-Crypt-DSA-1.17-10.fc18

Crypt::DSA is an implementation of the DSA Digital Signature Algorithm signature verification system. This package provides DSA signing, signature verification, and key generation...

5.8CVSS2.8AI score0.01958EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2010/01/10 12:00 a.m.64 views

RHEL 3 / 4 : Satellite Server (RHSA-2008:0524)

Red Hat Network Satellite Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. This release corrects several...

10CVSS5.3AI score0.90768EPSS
SaveExploits43References75
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:00 a.m.12 views

MDVA-2009:051 : perl-Crypt-SSLeay

This update provides updated perl-Crypt-SSLeay, required for mdkonline to work with restricted resources. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:00 a.m.23 views

Fedora 10 : perl-Crypt-OpenSSL-DSA-0.13-12.fc10 (2009-2090)

Fixes CVE-2009-0129: The Crypto::OpenSSL::DSA module now croaks upon error rather than returning a -1 to ensure programmers are not caught by surprise which only checking for non-zero results. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

5CVSS5.4AI score0.01117EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2009/03/02 12:00 a.m.28 views

Fedora Core 10 FEDORA-2009-2090 (perl-Crypt-OpenSSL-DSA)

The remote host is missing an update to perl-Crypt-OpenSSL-DSA announced via advisory FEDORA-2009-2090. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

5CVSS6.5AI score0.01117EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2009/02/20 12:00 a.m.26 views

Fedora 9 : perl-Crypt-OpenSSL-DSA-0.13-9.fc9 (2009-1914)

Fixes CVE-2009-0129: The Crypto::OpenSSL::DSA module now croaks upon error rather than returning a -1 to ensure programmers are not caught by surprise which only checking for non-zero results. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

5CVSS5.4AI score0.01117EPSS
SaveExploits1References3
Rows per page
Query Builder