11758 matches found
CVE-2024-55912
IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
NCSC Guidance on “Advanced Cryptography”
The UK's National Cyber Security Centre just released its white paper on "Advanced Cryptography," which it defines as "cryptographic techniques for processing encrypted data, providing enhanced functionality over and above that provided by traditional cryptography." It includes things like...
CVE-2024-55912
IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2024-55912 IBM Concert Software information disclosure
IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2024-55912
CVE-2024-55912 affects IBM Concert Software 1.0.0–1.0.5, where the use of weaker-than-expected cryptographic algorithms could permit an attacker to decrypt highly sensitive information. The related sources in connected documents confirm affected versions and a remediation: upgrade to IBM Concert ...
CVE-2024-55912 IBM Concert Software information disclosure
IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
IBM Concert 加密问题漏洞
IBM Concert Software is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. IBM Concert Software suffers from a cryptographic issue vulnerability that stems from the use of weak encryption algorithms, which could be...
PT-2025-18733 · Ibm · Ibm Concert
Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.5 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
CVE-2025-33074
The CVE-2025-33074 entry describes an improper verification of cryptographic signatures in Microsoft Azure Functions, enabling an authenticated attacker to execute code over a network. Several connected sources corroborate the issue across vendors and regions (NVD/NVDC, Red Hat, CNVD, MSRC, PT Se...
Azure Functions Remote Code Execution Vulnerability
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
PT-2025-18304 · Microsoft · Azure Functions
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Functions affected versions not specified Description: The issue is related to the improper verification of cryptographic signatures in Microsoft Azure Functions, allowing an authorized attacker to execute code over a network...
ROS-20250430-15
Vulnerability of sshd service of OpenSSH cryptographic protection tool is related to inconsistency with the functionality of the DisableForwarding directive stated in the DisableForwarding directive functionality stated in the documentation. Exploitation of the vulnerability could allow an intrud...
LibreOffice 24.8.x < 24.8.6 / 25.2.x < 25.2.2 (CVE-2025-2866)
The version of LibreOffice installed on the remote host is prior to 24.8.6 or 25.2.2. It is, therefore, affected by a PDF signature spoofing vulnerability: - Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the...
Active Light Modulation to Counter Manipulation of Speech Visual Content
High-profile speech videos are prime targets for falsification, owing to their accessibility and influence. This work proposes Spotlight, a low-overhead and unobtrusive system for protecting live speech videos from visual falsification of speaker identity and lip and facial motion. Unlike...
The vulnerability in the web-based interface of the Cisco Secure Network Analytics system (previously known as Cisco Stealthwatch Enterprise) allows a malicious actor to elevate their privileges to the root level.
The vulnerability in the web-based interface of the Cisco Secure Network Analytics system, previously known as Cisco Stealthwatch Enterprise, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root...
USN-7471-1 poppler vulnerabilities
It was discovered that poppler did not properly verify adbe.pkcs7.sha1 signatures in PDF documents. An attacker could possibly use this issue to create documents with forged signatures that are treated as legitimately signed...