Lucene search
+L

4469 matches found

OSV
OSV
•added 2025/07/28 6:15 p.m.•17 views

CVE-2025-43023

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA...

9.1CVSS7.3AI score0.00246EPSS
SaveExploits0References2
OSV
OSV
•added 2025/07/28 6:15 p.m.•13 views

UBUNTU-CVE-2025-43023

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA...

9.1CVSS5.8AI score0.00246EPSS
SaveExploits0References3
CVE
CVE
•added 2025/07/28 5:46 p.m.•49 views

CVE-2025-43023

CVE-2025-43023 affects HP Linux Imaging and Printing Software. Vulnerability stems from use of a weak DSA code signing key in the software documentation entry. NVD/NVDS data describe a network-accessible issue with high confidentiality and integrity impact (C/H) and a critical base score (CVSS 3....

9.1CVSS6.7AI score0.00246EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/28 5:46 p.m.•3 views

CVE-2025-43023 HP Linux Imaging and Printing Software - Use of DSA Key

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA...

5.9CVSS7.3AI score0.00246EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/07/28 5:46 p.m.•18 views

CVE-2025-43023

Removed by vendor...

9.1CVSS6.7AI score0.00246EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/07/28 10:21 a.m.•13 views

CVE-2022-50237

A flaw was found in ed25519-dalek. The Keypair implementation allows an attacker to compute a private key by observing signatures generated with corresponding public keys. This public key signing function oracle attack does not require authentication. An unauthenticated attacker can extract the...

5.9CVSS5.9AI score0.00191EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2025/07/28 3:31 a.m.•23 views

Duplicate Advisory: `ed25519-dalek` Double Public Key Signing Function Oracle Attack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5vr-6qhr-36cc. This link is maintained to preserve external references. Original Description The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair...

5.9CVSS7.1AI score0.00191EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2025/07/28 3:31 a.m.•13 views

GHSA-G693-V3JR-8HCR Duplicate Advisory: `ed25519-dalek` Double Public Key Signing Function Oracle Attack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5vr-6qhr-36cc. This link is maintained to preserve external references. Original Description The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair...

5.9CVSS6.1AI score
SaveExploits0References4
OSV
OSV
•added 2025/07/28 2:15 a.m.•14 views

UBUNTU-CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

5.9CVSS5.8AI score0.00191EPSS
SaveExploits0References5
CVE
CVE
•added 2025/07/28 12:00 a.m.•70 views

CVE-2022-50237

The CVE-2022-50237 entry concerns the ed25519-dalek Rust crate prior to version 2. The Keypair implementation enables a double public key signing function oracle attack, enabling an attacker to compute/extract a private key from signatures. Reported impact includes confidentiality loss; CVSSv3.1 ...

5.9CVSS7.1AI score0.00191EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•5 views

CVE-2025-43023: Improper Verification of Cryptographic Signature

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA...

9.1CVSS5.7AI score0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/28 12:00 a.m.•5 views

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

5.9CVSS6.2AI score0.00191EPSS
SaveExploits0References3
Mend
Mend
•added 2025/07/28 12:00 a.m.•3 views

CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

6.9CVSS0.00191EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•4 views

CVE-2022-50237: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key...

5.9CVSS5.7AI score0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•17 views

HP Linux Imaging and Printing Software 安全漏洞

HP Linux Imaging and Printing Software is a Hewlett-Packard HP USA installation, usage and management software package that supports HP printers and scanners. A security vulnerability exists in HP Linux Imaging and Printing Software that originates from the use of a weak DSA signing key...

9.1CVSS6.5AI score0.00246EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•18 views

ed25519-dalek crate 安全漏洞

ed25519-dalek crate is a Rust library from dalek cryptography open source. A security vulnerability exists in versions prior to ed25519-dalek crate 2, which stems from a dual public key signing function leading to private key extraction...

5.9CVSS6.4AI score0.00191EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•16 views

PT-2025-31134

Name of the Vulnerable Software and Affected Versions HP Linux Imaging and Printing Software affected versions not specified Description A potential security issue exists due to the use of a weak code signing key employing the Digital Signature Algorithm DSA. Recommendations At the moment, there ...

9.8CVSS5.9AI score0.04565EPSS
SaveExploits0References34
Hewlett-Packard
Hewlett-Packard
•added 2025/07/25 12:00 a.m.•45 views

HP Linux Imaging and Printing Software - Use of DSA Key

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA. HP has identified affected versions and the minimum software version that...

9.1CVSS6.6AI score0.00246EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/07/25 12:00 a.m.•22 views

NewStart CGSL MAIN 7.02 : samba Multiple Vulnerabilities (NS-SA-2025-0133)

The remote NewStart CGSL host, running version MAIN 7.02, has samba packages installed that are affected by multiple vulnerabilities: - A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba...

9.8CVSS6.7AI score0.62402EPSS
SaveExploits2References23
NVD
NVD
•added 2025/07/22 3:15 p.m.•14 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00196EPSS
SaveExploits0References6
Rows per page
Query Builder