USN-6046-1 openssl-ibmca vulnerabilities

It was discovered that OpenSSL-ibmca incorrectly handled certain RSA decryption. An attacker could possibly use this issue to expose sensitive information...

java-17-openjdk security and bug fix update

An update is available for java-17-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...

The vulnerabilities of the functions EVP_DigestInit(), EVP_DigestUpdate(), or EVP_DigestFinal() in the OpenSSL cryptographic library that implements the PKCS #7 standard allow a perpetrator to cause a service failure.

The vulnerability of the EVPDigestInit, EVPDigestUpdate, or EVPDigestFinal functions in the PKCS 7 standard implementation of the OpenSSL cryptographic library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security Bulletin: TLS 1.0 and TLS 1.1 is enabled in IBM Safer Payments (CVE-2023-27557)

Summary IBM Safer Payments had older TLS 1.0 and TLS 1.1 protocols enabled by default. These protocols are now disabled. Vulnerability Details CVEID:CVE-2023-27557 DESCRIPTION: IBM Counter Fraud Management for Safer Payments uses weaker than expected cryptographic algorithms that could allow an...

K000133616: Node.js vulnerability CVE-2023-23919

Security Advisory Description A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that...

DEBIAN-CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...

CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...

UBUNTU-CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...

The War on Passwords Enters a Chaotic New Phase

The transition from traditional logins to cryptographic passkeys is getting messy. But don’t worry—there’s a plan...

CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...

PT-2023-12213 · Unknown · Ribose Rnp

Name of the Vulnerable Software and Affected Versions: Ribose RNP versions prior to 0.15.1 Description: The issue is related to a weakness in the implementation of a cryptographic algorithm, where a required step is not properly implemented, resulting in weaker encryption than expected...

CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...

CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...

Bypass of CSRF protection in the presence of predictable userInfo

Description The CSRF protection enforced by the @fastify/csrf-protection library in combination with @fastify/cookie can be bypassed from network and same-site attackers under certain conditions. @fastify/csrf-protection supports an optional userInfo parameter that binds the CSRF token to the use...

CVE-2023-27495

@fastify/csrf-protection is a plugin which helps protect Fastify servers against CSRF attacks. The CSRF protection enforced by the @fastify/csrf-protection library in combination with @fastify/cookie can be bypassed from network and same-site attackers under certain conditions...

Important: Red Hat Security Advisory: java-17-openjdk security and bug fix update

An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

TEST REGULAR FINDING DURING BOT RACE WINDOW

Lines of code L1 Vulnerability details TEST --- The text was updated successfully, but these errors were encountered: All reactions...

The vulnerability of the software for configuring Schneider Electric EcoStruxure Operator Terminal Expert HMI terminals and the SCADA Pro-face BLUE software lies in the improper verification of the cryptographic signature. This allows a perpetrator to execute arbitrary codes.

The vulnerability of the software for configuring Schneider Electric EcoStruxure Operator Terminal Expert and the SCADA Pro-face BLUE software is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows a perpetrator to execute arbitrary code by loadin...

The vulnerability of the microprogramming software for Schneider Electric’s logic controllers for building and facility control systems, namely Schneider Electric’s spaceLYnk and Schneider Electric’s homeLYnk, stems from the use of a unreliable cryptographic algorithm. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the microprogramming software used in Schneider Electric’s logic controllers for building and facility control, such as Schneider Electric’s spaceLYnk and homeLYnk, is related to the use of a unreliable cryptographic algorithm. Exploiting this vulnerability could allow an...

ALSA-2023:1898 Important: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK:...