1492 matches found
CVE-2020-13895
Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...
CVE-2020-13895
CVE-2020-13895 affects Crypt::Perl::ECDSA in the Crypt::Perl (p5-Crypt-Perl) distribution for Perl, specifically before version 0.32. The issue is a verification bug where ECDSA signatures may fail to verify correctly when r and s are small and s = 1 on the secp256r1 (prime256v1) curve. The cited...
CVE-2020-13895
Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...
CVE-2020-13895: Improper Verification of Cryptographic Signature
Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...
PT-2020-13760
Name of the Vulnerable Software and Affected Versions Crypt::Perl versions prior to 0.32 Description The issue is related to the verification of ECDSA signatures. Specifically, when using the curve secp256r1 prime256v1, the verification may fail when r and s are small and when s equals 1. This...
libu2f-host: Multiple vulnerabilities
Background Yubico Universal 2nd Factor U2F Host C Library. Description Multiple vulnerabilities have been discovered in libu2f-host. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to plug-in a malicious USB device, possibly resulting i...
Brute-force Attack
postgresql is vulnerable to brute-force attacks. The vulnerability exists as a signedness issue was found in the way the crypt function in the PostgreSQL pgcrypto module handled 8-bit characters in passwords when using Blowfish hashing. Up to three characters immediately preceding a non-ASCII...
CVE-2019-5135
An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials. This affec...
CVE-2019-5135
An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials. This affec...
Authentication flaw
An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials. This affec...
CVE-2019-5135
An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials. This affec...
CVE-2019-5135
WAGO PFC100/200 Web-Based Management (WBM) authentication timing information disclosure (CVE-2019-5135) is detailed in the TALOS entry. The vulnerability resides in the WBM login routine where the PHP crypt() function is used to generate a password hash for comparison, allowing an attacker to inf...
CVE-2019-5135: Use of a Broken or Risky Cryptographic Algorithm
An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials. This affec...
PT-2020-11073
Name of the Vulnerable Software and Affected Versions WAGO PFC100 Firmware version 03.00.3912 WAGO PFC200 Firmware versions 03.00.3912 through 03.01.0713 Description An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web...
WAGO PFC100/200 Web-Based Management (WBM) Authentication Timing Information Disclosure Vulnerability
Summary An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials...
DEBIAN-CVE-2013-4412
slim has NULL pointer dereference when using crypt method from glibc 2.17...
CVE-2013-4412
slim has NULL pointer dereference when using crypt method from glibc 2.17...
Null pointer dereference
slim has NULL pointer dereference when using crypt method from glibc 2.17...
