4542 matches found
Design/Logic Flaw
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens...
CVE-2015-2951
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens...
CVE-2015-2951
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens...
CVE-2015-2951
The CVE-2015-2951 detail involves the F21 JWT PHP library (JWT.php) where versions before 2.0 fail to verify token signatures, enabling remote attackers to bypass signature verification via crafted tokens. Affected component is the PHP JWT token processor; root cause is signature verification byp...
CVE-2015-2951: Improper Input Validation
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens...
PT-2015-5999
Name of the Vulnerable Software and Affected Versions F21 JWT versions prior to 2.0 Description The issue allows remote attackers to bypass signature verification via crafted tokens. Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue...
CVE-2015-3407
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files...
Design/Logic Flaw
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files...
CVE-2015-3407
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files...
CVE-2015-3407
CVE-2015-3407 affects Module::Signature for Perl; root cause is improper handling that allows bypassing signature verification when a SIGNATURE file omits listed files. The issue is widely referenced in multiple advisories and is addressed by upgrading Module::Signature to a fixed version (e.g., ...
CVE-2015-3407
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files...
CVE-2015-3407: Improper Access Control
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files...
Ubuntu 14.04 LTS : Module::Signature vulnerabilities (USN-2607-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2607-1 advisory. John Lightsey discovered that Module::Signature incorrectly handled PGP signature boundaries. A remote attacker could use this issue to trick...
Lenovo ThinkPad series computers was traced to multiple security vulnerabilities-vulnerability warning-the black bar safety net
Recently, security firm IOActive at the Lenovo Series of computers found a security vulnerability, the attacker may be on the computers of legitimate applications replaced with malicious app and you can remotely execute malicious instructions. IOActive security researcher in the Bulletin elaborat...
MGASA-2015-0197 Updated dpkg packages fix CVE-2015-0840
Updated dpkg packages fix security vulnerability: The dpkg-source command in Debian dpkg before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file .dsc CVE-2015-0840...
Updated dpkg packages fix CVE-2015-0840
Updated dpkg packages fix security vulnerability: The dpkg-source command in Debian dpkg before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file .dsc CVE-2015-0840...
Foxit Multiple Products Memory Corruption Vulnerability
Foxit Reader, PhantomPDF is a PDF file processing program. Foxit Phantom PDF 7.x, Foxit Reader 7.x in the parsing of PDF files, when verifying the digital signature of the existence of a memory corruption vulnerability, the attacker through the PDF file constructed within the stream, the use of...
Foxit PhantomPDF < 7.1.5 Multiple DoS Vulnerabilities
Foxit PhantomPDF is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2015-6218
Name of the Vulnerable Software and Affected Versions Module::Signature versions prior to 0.74 Description The issue allows remote attackers to bypass signature verification for files. This can be achieved by using a signature file that does not list the files. Recommendations For versions prior ...