461 matches found
CVE-2015-9028
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine...
CVE-2016-3019
CVE-2016-3019 concerns IBM Security Access Manager (ISAM) for Web 9.0.0 where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Connected IBM advisories confirm the issue affects IBM Security Access Manager appliances running ISAM 9.0 a...
CVE-2016-5919
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference : 1996868...
CVE-2016-5919
IBM Security Access Manager for Web versions 7.0 (appliance), 8.0, and 9.0 are affected by CVE-2016-5919 due to weaker-than-expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM provides patches and upgrade paths: for Web 7.0, apply Interim Fi...
MatrixSSL < 3.8.7 Cryptographic Vulnerability
MatrixSSL is prone to a vulnerability in the modular exponentiation function. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...
MS16-155: Description of the Security and Quality Rollup .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 and Windows Server 2008 R2: December 13, 2016
MS16-155: Description of the Security and Quality Rollup .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 and Windows Server 2008 R2: December 13, 2016 View products that this article applies to. Summary This December 13, 2016, Security and Quality Rollup for .NET Framewor...
SSL Certificate Signed Using Weak Hashing Algorithm (Known CA)
The remote service uses a known CA certificate in the SSL certificate chain that has been signed using a cryptographically weak hashing algorithm e.g., MD2, MD4, MD5, or SHA1. These signature algorithms are known to be vulnerable to collision attacks CVE-2004-2761, for example. An attacker can...
FreeBSD : botan -- cryptographic vulnerability (f771880c-31cf-11e6-8e82-002590263bf5)
MITRE reports : The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Microsoft .NET Framework TLS/SSL Information Disclosure Vulnerability
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
The vulnerability of Nettle’s cryptographic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of x8664/ecc-384-modp.asm in the Nettle cryptographic library is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
USN-2903-2: NSS regression
USN-2903-1 fixed a vulnerability in NSS. An incorrect package versioning change in Ubuntu 12.04 LTS caused a regression when building software against NSS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Hanno Böck discovered that NSS incorrectly...
OpenSSL Cryptographic Algorithm Cracking Vulnerability
OpenSSL is a general-purpose open source cryptographic library that implements Secure Sockets Layer and Secure Transport Layer protocols and can support a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure hashing algorithms, and so on. OpenSSL there is a...
CVE-2015-3193
CVE-2015-3193 affects OpenSSL 1.0.2 on x86_64 where the Montgomery squaring implementation (BN_mod_exp path) mishandles carry propagation, potentially exposing private-key information via DH/DHE ciphersuites. OpenSSL versions 1.0.2 before 1.0.2e are vulnerable; fixed in 1.0.2e. Affected component...
Apple OS X Yosemite IDE Xcode Server Encryption Issue Vulnerability
OS X Yosemite is the new generation of Mac operating system and IDE Xcode Server is an integrated development tool. The IDE Xcode Server in OS X Yosemite has a cryptographic issue vulnerability that can be exploited by an attacker to access the traffic Xcode Server...
PT-2015-5903
Name of the Vulnerable Software and Affected Versions RC4 affected versions not specified Description The RC4 algorithm, used in the TLS and SSL protocols, does not properly combine state data with key data during the initialization phase. This weakness, known as the Invariance Weakness, allows...
JDK: Vulnerability in the IBMSecureRandom implementation of the IBMJCE and IBMSecureRandom cryptographic providers
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier f...
Debian DSA-2781-1 : python-crypto - PRNG not correctly reseeded in some situations
A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...
Debian Security Advisory DSA 2781-1 (python-crypto - PRNG not correctly reseeded in some situations)
A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...
