CVE-2020-9690

The CVE-2020-9690 observable timing discrepancy affects Magento/OpenMage LTS: OpenMage LTS before 19.4.6 and 20.0.2 allows bypass of fromkey protection in Admin Interface, increasing CSRF risk; patched in 19.4.6 and 20.0.2. Details are tied to Adobe’s CVE-2020-9690; exploitation status is not pro...

CVE-2020-9690

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass...

APSB20-47 Security updates available for Magento

Magento has released updates for Magento Commerce 2 formerly known as Magento Enterprise Edition and Magento Open Source 2 formerly known as Magento Community Edition. These updates resolve vulnerabilities rated Important and Critical . Successful exploitation could lead to arbitrary code executi...

OPENSUSE-SU-2020:1100-1 Security update for singularity

This update for singularity fixes the following issues: - New version 3.6.0. This version introduces a new signature format for SIF images, and changes to the signing / verification code to address the following security problems: - CVE-2020-13845, boo1174150 In Singularity 3.x versions below...

CVE-2016-7064

A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage...

CVE-2016-7064

A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage...

Design/Logic Flaw

A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage...

CVE-2016-7064

A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage...

CVE-2016-7064

CVE-2016-7064 affects the open-source Pritunl client: before version 1.0.1116.6, a lack of signature verification allows information leakage. Root cause: the client does not verify signatures on data/files, enabling potential exposure of sensitive information. Affected: pritunl-client versions pr...

proglottis/gpgme: Use-after-free in GPGME bindings during container image pull

A use-after-free vulnerability was found in the Go GPGME wrapper library, github.com/proglottis/gpgme. An attacker could use this flaw to crash or cause potential code execution in Go applications that use this library, under certain conditions, during GPG signature verification...

Improper Signature Verification

crypto/x509 does not properly perform certificate verification. The Certifacte.Verify ignores the requirements of provided EKUs on Windows against the VerifyOptions.KeyUsages in the verification process...

The vulnerability of software and hardware Bluetooth drivers for Android, macOS, and iOS allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of Bluetooth device drivers for Android, macOS, and iOS operating systems is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to execute a “man-in-the-middle” attack...

Debian DLA-2274-1 : fwupd security update

It was discovered that there was a possible signature verification issue in firmware update daemon library 'fwupd' as the return value of gpgmeopverifyresult was not being checked. For Debian 9 'Stretch', this issue has been fixed in fwupd version 0.7.4-2+deb9u1. We recommend that you upgrade you...

CVE-2020-15093 Improper verification of signature threshold in tough

The tough library Rust/crates.io prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique signatures before the metadata is considered valid. A...

[SECURITY] [DLA 2274-1] fwupd security update

Package : fwupd Version : 0.7.4-2+deb9u1 CVE ID : CVE-2020-10759 Debian Bug : 962517 It was discovered that there was a possible signature verification issue in firmware update daemon library "fwupd" as the return value of gpgmeopverifyresult was not being checked. For Debian 9 "Stretch", this...

PT-2020-6858 · Cpan +6 · Cpan +6

Name of the Vulnerable Software and Affected Versions: CPAN version 2.28 Description: The issue is related to the incorrect verification of cryptographic signatures in the CPAN language, specifically in the Module::Signature:: verify function. This could allow a remote attacker to access...

CVE-2020-9226

HUAWEI P30 with versions earlier than 10.1.0.135C00E135R2P11 have an improper signature verification vulnerability. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device...

CVE-2020-9226

HUAWEI P30 with versions earlier than 10.1.0.135C00E135R2P11 have an improper signature verification vulnerability. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device...

Design/Logic Flaw

HUAWEI P30 with versions earlier than 10.1.0.135C00E135R2P11 have an improper signature verification vulnerability. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device...

CVE-2020-9226

CVE-2020-9226 affects Huawei P30 devices running versions older than 10.1.0.135 (C00E135R2P11). The vulnerability stems from an improper signature verification when validating a software package, allowing an attacker to load a crafted package onto the device. Connected documents confirm the影の roo...