Lucene search
K

572 matches found

Tenable Nessus
Tenable Nessus
added 2022/12/28 12:0 a.m.16 views

EulerOS Virtualization 2.10.1 : gnupg2 (EulerOS-SA-2022-2929)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and othe...

6.5CVSS7.3AI score0.015EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/11/04 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2709)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.015EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/11/03 12:0 a.m.7 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2681)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.015EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/11/02 12:0 a.m.20 views

EulerOS 2.0 SP10 : gnupg2 (EulerOS-SA-2022-2681)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints...

6.5CVSS7.3AI score0.015EPSS
Exploits1References2
NVD
NVD
added 2022/11/01 6:15 p.m.15 views

CVE-2020-4099

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...

7.5CVSS0.00178EPSS
Exploits0References1
OSV
OSV
added 2022/11/01 6:15 p.m.1 views

CVE-2020-4099

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...

7.5CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2022/11/01 6:15 p.m.12 views

Code injection

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...

5CVSS7.5AI score0.00178EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/01 12:0 a.m.3 views

PT-2022-9033 · Hcl +1 · Hcl Verse For Android +1

Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital...

7.5CVSS7.4AI score0.00178EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/10/12 12:0 a.m.21 views

AlmaLinux 8 : gnupg2 (ALSA-2022:6463)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6463 advisory. - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGM...

6.5CVSS7.3AI score0.015EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2460)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.015EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/10/09 12:0 a.m.22 views

EulerOS 2.0 SP8 : gnupg2 (EulerOS-SA-2022-2460)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints...

6.5CVSS7.3AI score0.015EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2022/10/06 12:26 p.m.0 views

node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery

A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...

7.5CVSS7.3AI score0.00144EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/10/06 12:26 p.m.1 views

node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery

A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...

7.5CVSS7.3AI score0.0018EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/10/05 10:44 a.m.0 views

node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery

A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...

7.5CVSS7.3AI score0.0018EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/10/05 10:44 a.m.0 views

node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery

A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...

7.5CVSS7.3AI score0.00144EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/09/26 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2344)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.015EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2022/09/25 12:0 a.m.25 views

secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery

The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...

7.5CVSS7.3AI score0.00131EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/09/25 12:0 a.m.20 views

GHSA-Q3F4-9H4P-VGR3 secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery

The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...

7.5CVSS7.5AI score0.00131EPSS
Exploits0References6
NVD
NVD
added 2022/09/24 7:15 p.m.8 views

CVE-2022-41340

The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...

7.5CVSS0.00131EPSS
Exploits0References4
OSV
OSV
added 2022/09/24 7:15 p.m.11 views

CVE-2022-41340

The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...

7.5CVSS7.6AI score
Exploits0References4
Rows per page
Query Builder