329 matches found
CVE-2020-15957
An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing DP3T. When it is configured to check JWT before uploading/publishing keys, it is possible to skip the signature check by providing a JWT token with alg=none...
CVE-2020-15957
An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing DP3T. When it is configured to check JWT before uploading/publishing keys, it is possible to skip the signature check by providing a JWT token with alg=none...
PT-2020-14737
Name of the Vulnerable Software and Affected Versions DP3T-Backend-SDK versions prior to 1.1.1 Description An issue was discovered in the DP3T-Backend-SDK. When configured to check JWT before uploading or publishing keys, it is possible to skip the signature check by providing a JWT token with...
CVE-2020-0204
In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escalation of privilege by allowing a bypass of the initial zip file signature check for an OS update with no additional execution privileges...
CVE-2020-0204
In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escalation of privilege by allowing a bypass of the initial zip file signature check for an OS update with no additional execution privileges...
CVE-2020-0204: Time-of-check Time-of-use (TOCTOU) Race Condition
In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local escalation of privilege by allowing a bypass of the initial zip file signature check for an OS update with no additional execution privileges...
Autodesk Dynamo BIM Code Issue Vulnerability
Autodesk Dynamo BIM is a suite of open-source graphic programming design software from Autodesk USA. A security vulnerability exists in Autodesk Dynamo BIM version 2.5.1 and 2.5.0, which originates from the program's inability to properly verify signatures. The vulnerability can be exploited by a...
CVE-2016-11044
An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 with Fingerprint support software. The check of an application's signature can be bypassed during installation. The Samsung ID is SVE-2016-5923 June 2016...
CVE-2016-11044
An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 with Fingerprint support software. The check of an application's signature can be bypassed during installation. The Samsung ID is SVE-2016-5923 June 2016...
PT-2020-7973
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with L5.0/5.1 and M6.0 software Description: An issue was discovered on Samsung mobile devices where the check of an application's signature can be bypassed during installation. This issue affects devices with L5.0/5.1...
CVE-2015-7336
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed...
CVE-2015-7336: Improper Verification of Cryptographic Signature
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed...
PT-2020-7881
Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A vulnerability was reported in Lenovo System Update that could allow the signature check of an update to be bypassed. This issue was fixed and publicly disclosed in 2015...
SUSE-SU-2020:0699-1 Security update for ovmf
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. - CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. - CVE-2019-14559: Fixe...
openSUSE Security Update : ovmf (openSUSE-2020-314)
This update for ovmf fixes the following issues : Security issues fixed : - CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. - CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. - CVE-2019-14559:...
openSUSE: Security Advisory for ovmf (openSUSE-SU-2020:0314-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for ovmf (moderate)
openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2020:0314-1 Rating: moderate References: 1153072 1163927 1163959 1163969 Cross-References: CVE-2019-14553 CVE-2019-14559 CVE-2019-14563 CVE-2019-14575 Affected Products: openSUSE Leap 15.1 An update that fixes four...
SUSE SLES15 Security Update : ovmf (SUSE-SU-2020:0568-1)
This update for ovmf fixes the following issues : Security issues fixed : CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. CVE-2019-14559: Fixed a...
SUSE-SU-2020:0568-1 Security update for ovmf
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. - CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. - CVE-2019-14559: Fixe...