CVE-2017-8191

The CVE-2017-8191 entry affects FusionSphere OpenStack (FusionSphere OpenStack V100R006C00SPC102 NFV). Description confirms a weak/cryptographic algorithm vulnerability that can allow attackers to crack ciphertext and cause information leakage on transmission links (impact: confidentiality). The ...

IEEE P1735 Cryptographic Issues Vulnerability

IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. The implementation of IEEE P1735 is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to obtain the intellectual property of an electronic design...

IEEE P1735 Cryptographic Problem Vulnerability (CNVD-2017-33399)

IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. The implementation of IEEE P1735 is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to obtain the intellectual property of an electronic design...

IEEE P1735 Cryptographic Issue Vulnerability (CNVD-2017-33396)

IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. The implementation of IEEE P1735 is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to change the encryption key and inject a hardware Trojan horse into arbitrary...

IEEE P1735 Cryptographic Issue Vulnerability (CNVD-2017-33394)

IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. A security vulnerability exists in the implementation of IEEE P1735. An attacker could exploit the vulnerability to gain access to the intellectual property of an electronic design...

IEEE P1735 Cryptographic Issue Vulnerability (CNVD-2017-33395)

IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. The implementation of IEEE P1735 is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to obtain the intellectual property of an electronic design...

SUSE-SU-2017:2855-1 Security update for Botan

This update for Botan fixes the following issues: This security issue was fixed: - CVE-2017-14737: A cryptographic cache-based side channel in the RSA implementation in Botan allowed a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occured because an...

CVE-2017-1375

CVE-2017-1375 affects IBM Storwize V7000 Unified (V7000U) 1.5 to 1.6, where use of weaker cryptographic algorithms could allow an attacker to decrypt highly sensitive information. IBM’s bulletin notes that a fix is available in v1.6.2.0 (1.5 is EOS); apply the upgrade to mitigate. The issue is do...

Fedora 26 : 1:wpa_supplicant (2017-60bfb576b7) (KRACK)

Fix the for the Key Reinstallation Attacks ========================================== - hostapd: Avoid key reinstallation in FT handshake CVE-2017-13082 - Fix PTK rekeying to generate a new ANonce - Prevent reinstallation of an already in-use group key and extend protection of GTK/IGTK...

Default credentials

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

CVE-2015-9028

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine...

CVE-2016-3019

CVE-2016-3019 concerns IBM Security Access Manager (ISAM) for Web 9.0.0 where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Connected IBM advisories confirm the issue affects IBM Security Access Manager appliances running ISAM 9.0 a...

CVE-2016-5919

IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference : 1996868...

CVE-2016-5919

IBM Security Access Manager for Web versions 7.0 (appliance), 8.0, and 9.0 are affected by CVE-2016-5919 due to weaker-than-expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM provides patches and upgrade paths: for Web 7.0, apply Interim Fi...

MatrixSSL < 3.8.7 Cryptographic Vulnerability

MatrixSSL is prone to a vulnerability in the modular exponentiation function. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

MS16-155: Description of the Security and Quality Rollup .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 and Windows Server 2008 R2: December 13, 2016

MS16-155: Description of the Security and Quality Rollup .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 and Windows Server 2008 R2: December 13, 2016 View products that this article applies to. Summary This December 13, 2016, Security and Quality Rollup for .NET Framewor...

SSL Certificate Signed Using Weak Hashing Algorithm (Known CA)

The remote service uses a known CA certificate in the SSL certificate chain that has been signed using a cryptographically weak hashing algorithm e.g., MD2, MD4, MD5, or SHA1. These signature algorithms are known to be vulnerable to collision attacks CVE-2004-2761, for example. An attacker can...

FreeBSD : botan -- cryptographic vulnerability (f771880c-31cf-11e6-8e82-002590263bf5)

MITRE reports : The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Microsoft .NET Framework TLS/SSL Information Disclosure Vulnerability

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

The vulnerability of Nettle’s cryptographic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of x8664/ecc-384-modp.asm in the Nettle cryptographic library is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...