734 matches found
CVE-2020-4099
The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...
CVE-2020-4099
The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...
Code injection
The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...
PT-2022-9033 · Hcl +1 · Hcl Verse For Android +1
Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital...
AlmaLinux 8 : gnupg2 (ALSA-2022:6463)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6463 advisory. - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGM...
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2460)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : gnupg2 (EulerOS-SA-2022-2460)
According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints...
node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery
A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...
node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery
A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...
node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery
A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...
node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery
A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature...
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2344)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery
The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...
GHSA-Q3F4-9H4P-VGR3 secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery
The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...
CVE-2022-41340
The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...
Design/Logic Flaw
The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...
CVE-2022-41340
The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery...
CVE-2022-41340
The CVE-2022-41340 issue concerns the secp256k1-js package for Node.js prior to version 1.1.0. The root cause is lack of required r and s validation in the ECDSA implementation, which enables signature forgery. Affected software: secp256k1-js before 1.1.0. The recommended remediation is to upgrad...
