7542 matches found
Information disclosure
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
CVE-2020-5390
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
PYSEC-2020-94
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
PYSEC-2020-94
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
CVE-2020-5390
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
EulerOS Virtualization for ARM 64 3.0.5.0 : jasper (EulerOS-SA-2020-1053)
According to the versions of the jasper package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpcfirstone in...
stb assertion failure vulnerability
stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttcffgetindex in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...
stb assertion failure vulnerability (CNVD-2020-04055)
stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttcffint in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...
stb assertion failure vulnerability (CNVD-2020-04060)
stb is a C/C++ library consisting of a single file. An assertion failure vulnerability exists in stbttbufseek in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2020-6619
stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...
CVE-2020-6617
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...
CVE-2020-6619
stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...
CVE-2020-6617
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...
CVE-2020-6623
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...
CVE-2020-6623
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...
CVE-2020-6617
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...
CVE-2020-6617
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...
Design/Logic Flaw
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...