CVE-2022-34746

CVE-2022-34746 affects Zyxel GS1900 series firmware prior to V2.70. The issue is an insufficient entropy vulnerability in RSA key pair generation due to improper randomness, enabling an unauthenticated attacker to retrieve the private key by factoring the RSA modulus N in the certificate used by ...

PT-2022-22313 · Zyxel · Zyxel Gs1900

Name of the Vulnerable Software and Affected Versions: Zyxel GS1900 series firmware versions prior to V2.70 Description: An insufficient entropy issue, caused by the improper use of randomness sources with low entropy for RSA key pair generation, affects the web administration interface. This cou...

SUSE-SU-2022:3287-1 Security update for python-rsa

This update for python-rsa fixes the following issues: - CVE-2020-13757: Fixed an issue where leading null bytes in a ciphertext would be ignored during decryption, leading to a potential information leak bsc1172389...

Security Bulletin: Vulnerability in IBM WebSphere Application Server affects WebSphere Process Server and WebSphere Process Server Hypervisor Editions (CVE-2015-0138)

Summary The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM WebSphere Application Server Full Profile and IBM WebSphere Application Server Hypervisor Edition that is used by WebSphere Process Server and WebSphere Process Server Hypervisor Editions...

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

Design/Logic Flaw

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout through 2022-06-27 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

CVE-2022-40306

CVE-2022-40306 affects ECi Printanista Hub (formerly FMAudit Printscout). The /Login form processes expensive RSA key-generation operations, enabling DoS via repeated requests on versions prior to 5.5.2. Remediation: upgrade to 5.5.2+ (or later); as a temporary measure, restrict access to the /Lo...

golang: crash in a golang.org/x/crypto/ssh server

A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability...

ECi Software Solutions Printanista Hub 安全漏洞

ECi Software Solutions Printanista Hub is a hosted print service software from ECi Software Solutions. A security vulnerability exists in ECi Software Solutions Printanista Hub versions prior to 2022-06-27 that stems from the login form/Login performing an expensive RSA key generation operation,...

PT-2022-25339 · Eci · Eci Printanista Hub

Name of the Vulnerable Software and Affected Versions: ECi Printanista Hub formerly FMAudit Printscout versions prior to 5.5.2 Description: The login form "/Login" performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form...

nss and nspr bug fix and enhancement update

An update is available for nspr, nss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...

The vulnerability of the python-cryptography package, a programming language interpreter for Python, allows attackers to gain unauthorized access to protected information.

The vulnerability of the python-cryptography package, a programming language interpreter for Python, is related to errors in RSA key management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Security Bulletin: Vulnerability with RSA Export Keys may affect IBM HTTP Server and WebSphere EDGE Caching Proxy (CVE-2015-0138)

Summary The "FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability CVE-2015-0138 may affect some configurations of IBM HTTP Server for WebSphere Application Server and IBM WebSphere EDGE caching proxy. Vulnerability Details CVEID: CVE-2015-0138 DESCRIPTION: A...

CVE-2021-35135

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35135

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Null pointer dereference

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35135

CVE-2021-35135 describes a null pointer dereference that may occur during RSA key import in Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The CVE is tied to Qualcomm closed-source components; vulnerability impact is li...

CVE-2021-35135

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...