Improper Verification Of Cryptographic Signatures

sylabs sif is vulnerable to a lack of cryptographic signature validations. The vulnerability exists due to the package not verifying the hash algorithm used is cryptographically secure when verifying digital signatures allowing an attacker to perform unauthorized actions...

GHSA-M5M3-46GJ-WCH8 SIF's Digital Signature Hash Algorithms Not Validated

Impact The github.com/sylabs/sif/v2/pkg/integrity package does not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. Patches A patch is available in version = v2.8.1 of the module. Users are encouraged to upgrade. The patch is commit...

Singularity Image Format 加密问题漏洞

Singularity Image Format is a compressed squashfs file system from Singularity that has a block organization structure, including metadata and definition files for containers, first labels, partition contents, signatures if they exist, and, of course, the containers for the binaries themselves...

Octopus Server 加密问题漏洞

Octopus Server is an automated deployment platform. Octopus Server has a cryptographic issue vulnerability that stems from the fact that it uses the same encryption process for encrypting session cookies and variables...

The vulnerability of the Valmet System 2019 software suite (Metso DNA) is related to the unsafe use of cryptographic algorithms, allowing a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of the Valmet System 2019 software suite Metso DNA is related to the unsafe use of cryptographic algorithms. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

Cisco Enterprise NFV Infrastructure Software Improper Signature Verification Vulnerability

A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to insufficient cryptographic signature verification of upgrade...

Delta Electronics DIALink Known Cryptographic Key Authentication Bypass (CVE-2022-2660)

Binary data deltaelectronicsdialinkjwtkey.nbin...

age and Authenticated Encryption

age is a file encryption format, tool, and library. It was made to replace one of the last remaining GnuPG use cases, but it was not made to replace GnuPG because in the last 20 years we learned that cryptographic tools work best when they are specialized and opinionated instead of flexible Swiss...

Improper Handling Of Cryptographic Signatures

github.com/theupdateframework/go-tuf is vulnerable to improper handling of cryptographic signatures. A remote attacker is able to cause the same signature from the same public key to be counted more than once against the threshold of signatures because they are mistakenly distinguished due to...

PT-2023-6741 · Ibm +3 · Jsse +5

Name of the Vulnerable Software and Affected Versions: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE versions 8.0.7.0 through 8.0.7.11 Description: The issue is related to the use of flawed cryptographic algorithms in the Java Secure Socket Extension JSSE and IBMJCEPlus...

CVE-2022-22423

IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...

CVE-2022-22423

IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...

Input validation

IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...

CVE-2022-22423

IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...

CVE-2022-22423

IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...

CVE-2022-22423

IBM Common Cryptographic Architecture (CCA) is affected by CVE-2022-22423, causing denial of service via improper input validation. Affected products/versions include CCA 5.x MTM for 4767 (5.0.0–5.7.11) and CCA 7.x MTM for 4769 (7.0.0–7.3.43). Remediation: upgrade to CCA 5.7.12 or later (AIX/Linu...

IBM Common Cryptographic Architecture 输入验证错误漏洞

IBM Common Cryptographic Architecture is a cryptographic platform from IBM, USA. It provides a number of features to protect financial transactions. A security vulnerability exists in IBM Common Cryptographic Architecture that stems from insufficient input validation, which can be exploited by an...

PT-2022-15422 · Ibm · Ibm Common Cryptographic Architecture

Name of the Vulnerable Software and Affected Versions: IBM Common Cryptographic Architecture CCA versions 5.x through 7.x Description: The issue is related to improper input validation, which could allow a local user to cause a denial of service. Recommendations: For versions 5.x through 7.x,...

The vulnerability of the implementation of the shim_lock verification mechanism in the Grub2 operating system allows a perpetrator to execute arbitrary code and gain full control over the device.

The vulnerability of the shimlock verification mechanism in the Grub2 operating system’s loader is related to incorrect checking of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain full control over the device...

PT-2022-22662 · Node.Js +6 · Node.Js +6

Name of the Vulnerable Software and Affected Versions: Node.js version 18 Description: A weak randomness issue exists in the WebCrypto keygen due to a change with EntropySource in SecretKeyGenTraits::DoKeyGen in src/crypto/crypto keygen.cc. There are two main problems: 1. The return value of...