603 matches found
Unity Linux 20.1070e Security Update: poppler (UTSA-2025-993337)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993337 advisory. NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries. Tenable ha...
DEBIAN-CVE-2025-68972
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...
cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures
Impact This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously users could generate a presignature, and then choose a HD derivation path while issuing a partial signature via...
CGGMP21 presignatures can be used in the way that significantly reduces security
This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously you could generate a presignature, and then choose a HD derivation path while issuing a partial signature via Presignature::setderivationpath,...
CGGMP21 presignatures can be used in the way that significantly reduces security
This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously you could generate a presignature, and then choose a HD derivation path while issuing a partial signature via Presignature::setderivationpath,...
TencentOS Server 4: poppler (TSSA-2025:0636)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0636 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
OESA-2025-2522 poppler security update
is a PDF rendering library. Security Fixes: NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.CVE-2025-43903...
OESA-2025-2521 poppler security update
is a PDF rendering library. Security Fixes: NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.CVE-2025-43903...
JLSEC-2025-92 GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information...
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME are met, allows signature forgery via injection into the status line...
EUVD-2021-2359
Malware in sbrugna...
EUVD-2006-4328
Malware in sbrugna...
EUVD-2021-23703
Malware in sbrugna...
EUVD-2021-0251
Malware in sbrugna...
EUVD-2018-7694
Malware in sbrugna...
EUVD-2016-7063
Malware in sbrugna...
EUVD-2010-3996
Malware in sbrugna...
EUVD-2021-2379
Malware in sbrugna...
EUVD-2021-2385
Malware in sbrugna...