CVE-2023-23431

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

CVE-2023-23431

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

CVE-2023-23431

CVE-2023-23431 affects some Honor products and is caused by a signature management vulnerability. An attacker with local access and low privileges could exploit it to forge a system file and overwrite the legitimate file, potentially impacting integrity and availability. The CVSS metrics assign a...

CVE-2023-23432

CVE-2023-23432 affects Honor products with a signature management vulnerability that could allow forged system files to overwrite legitimate ones. The available sources describe the issue and its impact (forged system files, potential integrity/availability concerns) but do not provide concrete d...

CVE-2023-23432

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

CVE-2023-23432

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

Honor NTH-AN00 Data Forgery Issue Vulnerability

The Honor NTH-AN00 Honor 50 is a smartphone from the Chinese company Honor. The Honor NTH-AN00 suffers from a security vulnerability that stems from a signature management vulnerability, successful exploitation of which could result in a forged system file overwriting a correct system file...

Honor Magic Ui Data Forgery Issue Vulnerability

Honor Magic Ui is an Android-based mobile operating system developed by Chinese company Honor. A security vulnerability exists in Honor Magic Ui, which stems from the presence of a signature management vulnerability, the successful exploitation of which may result in a forged system file...

Honor Magic Ui Data Forgery Issue Vulnerability

Honor Magic Ui is an Android-based mobile operating system developed by Chinese company Honor. A security vulnerability exists in Honor Magic Ui, which stems from a signature management vulnerability that can be successfully exploited to cause a forged system file to overwrite a correct system fi...

Honor NTH-AN00 Data Forgery Issue Vulnerability

The Honor NTH-AN00 Honor 50 is a smartphone from the Chinese company Honor. The Honor NTH-AN00 suffers from a security vulnerability that stems from a signature management vulnerability, successful exploitation of which could result in a forged system file overwriting a correct system file...

Honor NTH-AN00 Data Forgery Issue Vulnerability

The Honor NTH-AN00 Honor 50 is a smartphone from the Chinese company Honor. The Honor NTH-AN00 suffers from a security vulnerability that stems from a signature management vulnerability, successful exploitation of which could result in a forged system file overwriting a correct system file...

Poly Trio Security Feature Issue Vulnerability

Poly Trio is a Trio series business conference phone from Poly USA. A security signature issue vulnerability exists in Poly CCX and Trio that stems from a security signature issue vulnerability in the component Web Configuration Application. Affected products and versions: Poly CCX version 400, C...

PT-2023-18939 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue concerns a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. Recommendations: At the moment...

PT-2023-18943

Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue concerns a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. Recommendations At the moment,...

PT-2023-18944

Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue concerns a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. Recommendations At the moment,...

PT-2023-18941 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue concerns a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. Recommendations: At the moment...

PT-2023-18940 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. There is no information...

NewStart CGSL MAIN 6.06 : gnupg2 Vulnerability (NS-SA-2023-0086)

The remote NewStart CGSL host, running version MAIN 6.06, has gnupg2 packages installed that are affected by a vulnerability: - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME are me...

Improper Verification of Cryptographic Signature

Overview json-jwt is a JSON Web Token and its family JSON Web Signature, JSON Web Encryption and JSON Web Key in Ruby. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to a sign/encryption confusion attack via the JSON::JWT.decode function...

Foxit PDF Reader AcroForm Signature Memory Misreference Vulnerability

Foxit PDF Reader is a free and compact PDF document reader and printer. A security vulnerability exists in Foxit PDF Reader AcroForm Signature, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execu...