RVTools Cryptographic Error Unauthorized Access

The vulnerability of the RVTools virtualization audit application is related to errors in cryptographic transformations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Mozilla Firefox Thunderbird Cryptographic Transformation

The vulnerability of the Mozilla Firefox browser is related to errors in cryptographic transformations. Exploiting this vulnerability allows a remote attacker to conceal notifications for pages and perform spear-phishing attacks...

Mozilla Firefox Thunderbird Cryptographic Transformation

The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client is related to errors in cryptographic transformations. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

Distributed File HarmonyOS Cryptographic Error Read Delete

The vulnerability of the Distributed File component in the HarmonyOS operating system is related to errors in cryptographic transformations. Exploiting this vulnerability allows a malicious actor to remotely read and delete images from Harmony devices...

PT-2021-5347

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 95 Firefox ESR versions prior to 91.4.0 Thunderbird versions prior to 91.4.0 Description The issue is related to errors in cryptographic transformations and a race condition in notification code. This could allow a...

PT-2021-5351

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.4.0 Firefox ESR versions prior to 91.4.0 Firefox versions prior to 95 Description The issue is related to cursor spoofing attacks against users with a zoomed native cursor. It may allow a remote attacker to...

Google Chrome Unauthorized Access

The vulnerability of the Google Chrome browser user interface is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2020-5592

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72 Description The issue is related to side-channel information leakage in Network Internals, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This is also associated with...

NSS Libraries Cryptographic Error Unauthorized Access

The vulnerability of the NSS libraries is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

OpenSSL Cryptographic Disclosure

The vulnerability of the OpenSSL library is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

PT-2019-5808

Name of the Vulnerable Software and Affected Versions HID Global DigitalPersona U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver version 5.0.0.5 Description The issue is related to errors in cryptographic transformations in the driver, which results in weak encryption of a user'...

OpenSSL RSA Key Generation Private Key Recovery

The vulnerability of the RSA key generation algorithm in the OpenSSL library is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a malicious actor, operating remotely, to recover the secret key...

PT-2017-2120

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description A cryptographic issue can potentially occur in TrustZone, related to errors in cryptographic transformations. This issue may allow a remote attacker to elevate their privileges...

Junos Cryptographic Bypass

The vulnerability of the Junos operating system is related to errors in cryptographic transformations. Exploiting this vulnerability allows a malicious actor to bypass the cryptographic mechanisms used for encryption and authentication...

PT-2016-1746

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 13.2X51-D40 Juniper Junos OS versions prior to 14.1X53-D30 Juniper Junos OS versions prior to 15.1X53-D20 Description The issue is related to insufficient entropy in the Juniper Junos OS, which makes it easie...

PT-2016-1595

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.1 before 1.0.1r OpenSSL versions 1.0.2 before 1.0.2f Description The issue is related to errors in cryptographic transformations in the OpenSSL library, specifically in the ssl/s2 srvr.c function. This can be exploited by ...

PT-2015-3202

Name of the Vulnerable Software and Affected Versions Nettle versions prior to 3.2 Description The issue is related to the ecc 256 modp function in ecc-256.c, which does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve. Thi...

iOS Man-in-the-Middle

The vulnerability of the WebKit component of the iOS operating system is related to errors in cryptographic transformations. Exploiting this vulnerability allows a remote attacker to perform “man-in-the-middle” attacks due to errors in SSL certificate processing...