3561 matches found
CVE-2020-13895
Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...
Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability (CNVD-2020-32458)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5. The vulnerability can be exploited to bypass signature verification with modified documents or...
Foxit PhantomPDF Mac and Reader for Mac Data Forgery Issue Vulnerability
Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A security vulnerability exists in Foxit PhantomPDF Mac 3.4.0.1012 and earlier versions macOS and Foxit Reader 3.4.0.1012 and earlier versions macOS. An attacker can exploit the...
Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability
Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to bypass signature verification through modified files or files with...
Cisco IOS XE Data Forgery Issue Vulnerability (CNVD-2020-31991)
Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A data forgery vulnerability exists in software image validation in Cisco IOS XE, which arises from a program not properly checking the code area used to manage the digital signatu...
CVE-2020-3209
A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the area of code that manag...
Improper Signature Verification
fastecdsa does not properly perform signature verification. When Elliptic Curve Digital Signature Algorithm ECDSA signature is used with NIST P-256 SHA-256, it does not properly handled the point at infinity, leading to a failure in the signature verification if an extreme value in k and s^-1 is...
fastecdsa data forgery issue vulnerability
fastecdsa is a Python library for fast elliptic curve encryption by AntonKueltz Software Developers. A security vulnerability exists in fastecdsa versions prior to 2.1.2. An attacker can exploit the vulnerability to benefit by successfully guessing the user whose signature verification will fail...
CVE-2020-12607
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...
CVE-2020-12607
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...
Code injection
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...
PYSEC-2020-42
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...
CVE-2020-12607
CVE-2020-12607 affects the fastecdsa library prior to 2.1.2, where using the NIST P-256 curve in the ECDSA implementation mishandles the point at infinity during signature verification. This can cause verification to fail for an otherwise valid signature when extreme values occur for k and s^-1, ...
CVE-2020-12607
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...
Python-RSA Cryptography Problem Vulnerability
Python-RSA is a Python library that supports encryption and decryption, signing, verification of signatures, and key generation from the Dutch software developer SYBREN A.STVEL. A cryptographic issue vulnerability exists in Python-RSA versions prior to 4.1, which can be exploited by an attacker t...
PT-2020-13166 · Fastecdsa · Fastecdsa
Name of the Vulnerable Software and Affected Versions: fastecdsa versions prior to 2.1.2 Description: An issue was discovered in the ECDSA implementation when using the NIST P-256 curve. The point at infinity is mishandled, which means that for extreme values in k and s^-1, the signature...
CVE-2020-9753
Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...
CVE-2020-9753
Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer...
