9005 matches found
Terrafrost phpseclib data forgery issue vulnerability
Terrafrost phpseclib is a Terrafrost open source application. pure PHP implementation of the MIT license. A data forgery issue vulnerability exists in Terrafrost phpseclib versions prior to 2.0.31 and 3.x series versions prior to 3.0.7, which stems from incorrectly handling the RSA PKCS.No detail...
CVE-2021-30246
In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack...
CVE-2021-30246
In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack...
CVE-2020-36315
In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...
CVE-2020-36315
In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...
Code injection
In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack...
Design/Logic Flaw
In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...
Improper Certificate Validation in phpseclib
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...
GHSA-VF4W-FG7R-5V94 Improper Certificate Validation in phpseclib
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...
CVE-2021-30246
CVE-2021-30246 affects the jsrsasign package (Node.js) up to version 10.1.13, where some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized as valid. The issue is described as a vulnerability in signature validation with no widely known practical attack, and patches upgrade guidance exi...
CVE-2021-30246
In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack...
CVE-2020-36315
In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...
CVE-2020-36315
Summary: CVE-2020-36315 affects RELIC before 2020-08-01, allowing RSA PKCS#1 v1.5 signature forgery due to inadequate padding checks (and issues with the first two bytes). The vulnerability’s exploitation requires a low public exponent (e.g., 3), and the product defaults to not using such small e...
Insecure Cryptographic Functions
phpseclib/phpseclib uses insecure cryptographic functions. The vulnerability exists due to a mishandled RSA PKCS1 v1.5 signature verification...
SerenityOS Buffer Overflow Vulnerability (CNVD-2021-27368)
SerenityOS is a graphical Unix-like operating system for x86 computers. A buffer overflow vulnerability exists in /Userland/Libraries/LibCrypto/ASN1/DER.h in SerenityOS. An attacker can exploit this vulnerability to obtain sensitive information by parsing the RSA key ASN.1...
CVE-2021-30130
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...
CVE-2021-30130
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...
Design/Logic Flaw
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...
