11955 matches found
CVE-2021-43587
CVE-2021-43587 affects Dell PowerPath Management Appliance (versions 3.2, 3.1, 3.0 P01, 3.0, 2.6) where a hard-coded cryptographic key enables a locally authenticated, high-privileged attacker to access secrets and escalate privileges. Root cause: hard-coded key in the appliance. Impact: unauthor...
CVE-2021-43587
Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A local high-privileged malicious user may potentially exploit this vulnerability to gain access to secrets and elevate to gain higher privileges...
ALBA-2021:5224 opencryptoki bug fix and enhancement update
The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...
opencryptoki bug fix and enhancement update
The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...
Fresenius Kabi Agilia Connect Infusion System (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Fresenius Kabi Equipment: Agilia Connect Infusion System Vulnerabilities: Uncontrolled Resource Consumption, Use of a Broken or Risky Cryptographic Algorithm, Insufficiently Protected Credentials,...
Fresenius Kabi Agilia Connect Infusion System 加密问题漏洞
The Fresenius Kabi Agilia Connect Infusion System is an infusion system from Fresenius Kabi, Germany. The Fresenius Kabi Agilia Connect Infusion System suffers from a cryptographic issue vulnerability that stems from the Vigilant MasterMed application issuing authentication tokens to authenticate...
Updated olm packages fix security vulnerability
Updated olm packages fix security vulnerability: The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of t...
MGASA-2021-0571 Updated olm packages fix security vulnerability
Updated olm packages fix security vulnerability: The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of t...
Updated botan2 packages fix security vulnerability
Updated botan2 packages fix security vulnerability: The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the...
[SECURITY] [DSA 5025-1] tang security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5025-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2021 https://www.debian.org/security/faq -...
Debian DSA-5025-1 : tang - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5025 advisory. A flaw was discovered in tang, a network-based cryptographic binding server, which could result in leak of private keys. For the stable distribution bullseye, this problem...
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS S/MIME PKCS \#7 or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS X.509 OCSP or CRL functionality may be impacted depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However email clients and PDF viewers that use NSS for signature verification such as Thunderbird LibreOffice Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
...
The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client, related to errors in cryptographic transformations, allows attackers to perform spear-phishing attacks.
The vulnerability of the Mozilla Firefox browser is related to errors in cryptographic transformations. Exploiting this vulnerability allows a remote attacker to conceal notifications for pages and perform spear-phishing attacks...
The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client, related to errors in cryptographic transformations, allows attackers to perform spear-phishing attacks.
The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client is related to errors in cryptographic transformations. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...
CVE-2021-41028
A combination of a use of hard-coded cryptographic key vulnerability CWE-321 in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability CWE-297 in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an...
Design/Logic Flaw
A combination of a use of hard-coded cryptographic key vulnerability CWE-321 in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability CWE-297 in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an...
CVE-2021-41028
A combination of a use of hard-coded cryptographic key vulnerability CWE-321 in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability CWE-297 in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an...
CVE-2021-41028
A combination of a use of hard-coded cryptographic key vulnerability CWE-321 in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability CWE-297 in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an...
CVE-2021-41028
CVE-2021-41028 affects Fortinet FortiClient EMS up to 7.0.1 (and 6.4.6 and below) and FortiClient components for Windows, Linux, and macOS up to 7.0.1 and 6.4.6 and below. The root causes are a hard-coded cryptographic key in FortiClientEMS and improper certificate validation in FortiClient clien...
