CVE-2019-10181

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox...

CVE-2019-10181

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox...

CVE-2019-10181: Insufficient Verification of Data Authenticity

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox...

Design/Logic Flaw

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660...

PT-2019-16353

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue concerns the user keystore signature being ignored during boot, which can lead to bypassing boot image signature verification. This affects various Qualcomm...

The vulnerability of the SymCrypt library in the Windows operating system, related to errors in digital signature verification, allows a perpetrator to trigger a service failure.

The vulnerability of the SymCrypt library in the Windows operating system is related to errors in digitized signatures. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2019-2278: Improper Verification of Cryptographic Signature

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660...

CVE-2019-13177: Improper Verification of Cryptographic Signature

verification.py in django-rest-registration aka Django REST Registration library before 0.5.0 relies on a static string for signatures i.e., the Django Signing API is misused, which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to...

ABB HMI Missing Signature Verification

XL-19-005 - ABB HMI Absence of Signature Verification Vulnerability ======================================================================== Identifiers ----------- XL-19-005 CVE-2019-7229 ABBVU-IAMF-1902003 ABBVU-IAMF-1902012 CVSS Score ---------- 8.3 AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected...

Man-in-the-Middle (MitM)

openpgp is vulnerable to man-in-the-middle MitM attacks. The attacks exist because it does not verify the validity of primary and subkey packets before signature verification, defeating the purpose of signature verification and compromising the traffic between legit users...

CVE-2019-3875: Insufficient Verification of Data Authenticity

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself CDP or through the separately configured path. The CRL are often availab...

Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected...

Cisco Nexus 3000 Series and 9000 Series Switches in NX-OS Mode CLI Command Software Image Signature Verification Vulnerability

According to its self-reported version, Cisco NX-OS Software isa ffected by a vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credential...

Signature Verification Bypass in jwt-simple

Versions of jwt-simple prior to 0.5.3 are vulnerable to Signature Verification Bypass. If no algorithm is specified in the decode function, the packages uses the algorithm in the JWT to decode tokens. This allows an attacker to create a HS256 symmetric algorithm JWT with the server's public key a...

GHSA-8V5F-HP78-JGXQ Signature Verification Bypass in jwt-simple

Versions of jwt-simple prior to 0.5.3 are vulnerable to Signature Verification Bypass. If no algorithm is specified in the decode function, the packages uses the algorithm in the JWT to decode tokens. This allows an attacker to create a HS256 symmetric algorithm JWT with the server's public key a...

PT-2019-20029

Name of the Vulnerable Software and Affected Versions jwt-simple versions prior to 0.5.3 Description The issue allows an attacker to bypass signature verification. If no algorithm is specified in the decode function, the package uses the algorithm in the JWT to decode tokens. This enables an...

The vulnerability of the NX-OS network operating system, related to incorrect verification of the cryptographic signature, allows a perpetrator to install malicious software on a vulnerable device.

The vulnerability of the NX-OS network operating system is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to install malware on a vulnerable device...

The vulnerability of the command-line interface implementation of the network operating system NX-OS allows a attacker to install malware onto a vulnerable device.

The vulnerability of the command-line interface implementation of the NX-OS network operating system exists due to incorrect verification of the cryptographic signature. Exploiting this vulnerability may allow a perpetrator to install malware onto a vulnerable device...

The vulnerability of the NX-OS network operating system, related to incorrect verification of the cryptographic signature, allows a perpetrator to install malicious software on a vulnerable device.

The vulnerability of the NX-OS network operating system is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to install malware on a vulnerable device...

The vulnerability of the NX-OS network operating system, related to incorrect verification of the cryptographic signature, allows a perpetrator to install malware onto a vulnerable device.

The vulnerability of the NX-OS network operating system is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to install malware on a vulnerable device...