Improper Signature Verification

crypto/x509 does not properly perform certificate verification. The Certifacte.Verify ignores the requirements of provided EKUs on Windows against the VerifyOptions.KeyUsages in the verification process...

The vulnerability of software and hardware Bluetooth drivers for Android, macOS, and iOS allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of Bluetooth device drivers for Android, macOS, and iOS operating systems is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to execute a “man-in-the-middle” attack...

Debian DLA-2274-1 : fwupd security update

It was discovered that there was a possible signature verification issue in firmware update daemon library 'fwupd' as the return value of gpgmeopverifyresult was not being checked. For Debian 9 'Stretch', this issue has been fixed in fwupd version 0.7.4-2+deb9u1. We recommend that you upgrade you...

CVE-2020-15093 Improper verification of signature threshold in tough

The tough library Rust/crates.io prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique signatures before the metadata is considered valid. A...

[SECURITY] [DLA 2274-1] fwupd security update

Package : fwupd Version : 0.7.4-2+deb9u1 CVE ID : CVE-2020-10759 Debian Bug : 962517 It was discovered that there was a possible signature verification issue in firmware update daemon library "fwupd" as the return value of gpgmeopverifyresult was not being checked. For Debian 9 "Stretch", this...

PT-2020-6858 · Cpan +6 · Cpan +6

Name of the Vulnerable Software and Affected Versions: CPAN version 2.28 Description: The issue is related to the incorrect verification of cryptographic signatures in the CPAN language, specifically in the Module::Signature:: verify function. This could allow a remote attacker to access...

CVE-2020-9226

HUAWEI P30 with versions earlier than 10.1.0.135C00E135R2P11 have an improper signature verification vulnerability. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device...

CVE-2020-9226

HUAWEI P30 with versions earlier than 10.1.0.135C00E135R2P11 have an improper signature verification vulnerability. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device...

Design/Logic Flaw

HUAWEI P30 with versions earlier than 10.1.0.135C00E135R2P11 have an improper signature verification vulnerability. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device...

CVE-2020-9226

CVE-2020-9226 affects Huawei P30 devices running versions older than 10.1.0.135 (C00E135R2P11). The vulnerability stems from an improper signature verification when validating a software package, allowing an attacker to load a crafted package onto the device. Connected documents confirm the影の roo...

Huawei P30 Data Forgery Issue Vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei P30 10.1.0.135 C00E135R2P11, which stems from the program failing to properly verify the signature of a specific software package. An attacker can exploit the vulnerabilit...

Security Advisory - Improper Signature Verification Vulnerability in Some Huawei Smartphones

There is an improper signature verification vulnerability in some smartphones. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device. Vulnerability ID: HWPSIRT-2019-11220 This...

CVE-2020-9588

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass...

CVE-2020-9588

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass...

CVE-2020-9588

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass...

CVE-2020-9588

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass...

CVE-2020-9588

Magento CTX: CVE-2020-9588 affects Magento 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier. Description: an observable timing discrepancy vulnerability could allow signature verification bypass. The connected sources confirm the issue but do not specify exact ...

Mattermost Server Trust Management Issues Vulnerability (CNVD-2020-35447)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.9.0 that stems from encryption and signature verification not being mandatory. No details of the vulnerability are provided a...

CVE-2017-18909

An issue was discovered in Mattermost Server before 3.9.0 when SAML is used. Encryption and signature verification are not mandatory...

CVE-2017-18909

Mattermost Server before 3.9.0 with SAML enabled is affected. The root cause is that encryption and signature verification are not mandatory in the SAML flow, which can weaken protection of SAML data. Affected product: Mattermost Server (pre-3.9.0). No explicit exploit details, mitigation steps, ...