CVE-2017-18909

An issue was discovered in Mattermost Server before 3.9.0 when SAML is used. Encryption and signature verification are not mandatory...

PT-2020-8455

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.9.0 Description: An issue was discovered when SAML is used, where encryption and signature verification are not mandatory. Recommendations: For versions prior to 3.9.0, update to version 3.9.0 or later to...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : fwupd vulnerability (USN-4395-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4395-1 advisory. Justin Steven discovered that fwupd incorrectly handled certain signature verification. An attacker could possibly use this issue to insta...

Ubuntu: Security Advisory (USN-4395-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4395-1: fwupd vulnerability

Justin Steven discovered that fwupd incorrectly handled certain signature verification. An attacker could possibly use this issue to install an unsigned firmware...

USN-4395-1 fwupd vulnerability

Justin Steven discovered that fwupd incorrectly handled certain signature verification. An attacker could possibly use this issue to install an unsigned firmware...

Signature Verification Bypass

libfwupd.so is vulnerable to signature verification bypass. It does not validate the return value from the function gpgmeopverify when PGP signature is verified, causing a FuKeyringResult return with no timestamp and an empty authority that subsequently allows an installation of unsigned firmware...

The vulnerability of the Cisco IOS XE operating system’s image verification function, related to errors in verifying the cryptographic signature, allows a hacker to install malicious software.

The vulnerability of the Cisco IOS XE operating system’s image file verification function is related to errors in the cryptographic signature verification process. Exploiting this vulnerability could allow a perpetrator to install malicious software...

Crypt::Perl Data Forgery Issue Vulnerability

Perl is a general-purpose, interpreted, dynamic, cross-platform programming language from the Perl community.Crypt:: Perl is one of the cryptographic modules. A data forgery issue vulnerability exists in Crypt::Perl::ECDSA in versions of Crypt::Perl prior to 0.32 Perl, which stems from a program...

CVE-2020-13895

Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...

Design/Logic Flaw

Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...

CVE-2020-13895

Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...

Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability

Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to bypass signature verification through modified files or files with...

Foxit PhantomPDF Mac and Reader for Mac Data Forgery Issue Vulnerability

Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A security vulnerability exists in Foxit PhantomPDF Mac 3.4.0.1012 and earlier versions macOS and Foxit Reader 3.4.0.1012 and earlier versions macOS. An attacker can exploit the...

Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability (CNVD-2020-32458)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5. The vulnerability can be exploited to bypass signature verification with modified documents or...

Cisco IOS XE Data Forgery Issue Vulnerability (CNVD-2020-31991)

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A data forgery vulnerability exists in software image validation in Cisco IOS XE, which arises from a program not properly checking the code area used to manage the digital signatu...

CVE-2020-3209

A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the area of code that manag...

Improper Signature Verification

fastecdsa does not properly perform signature verification. When Elliptic Curve Digital Signature Algorithm ECDSA signature is used with NIST P-256 SHA-256, it does not properly handled the point at infinity, leading to a failure in the signature verification if an extreme value in k and s^-1 is...

fastecdsa data forgery issue vulnerability

fastecdsa is a Python library for fast elliptic curve encryption by AntonKueltz Software Developers. A security vulnerability exists in fastecdsa versions prior to 2.1.2. An attacker can exploit the vulnerability to benefit by successfully guessing the user whose signature verification will fail...

CVE-2020-12607

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...