11971 matches found
Security Bulletin: IBM DataPower Gateway is potentially vulnerable to two cryptographic side-channel vulnerabilities in SSL.
Summary Side-channel vulnerabilities in SSL CVE-2019-1563, CVE-2019-1547 potentially affect IBM DataPower Gateway Vulnerability Details CVEID: CVE-2019-1563 DESCRIPTION: In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker,...
Security Bulletin: IBM DataPower Gateway is affected by a vulnerability (CVE-2018-1665)
Summary IBM DataPower Gateway has addressed the following vulnerability: CVE-2018-1665 Vulnerability Details CVEID: CVE-2018-1665 DESCRIPTION: IBM DataPower Gateways uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CVSS Base...
Microsoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities
Microsoft Patch Tuesday – June 2021 Microsoft patched 50 CVEs in their June 2021 Patch Tuesday release, and five of them are rated as critical severity. Six have applicable exploits. Critical Microsoft Vulnerabilities Patched CVE-2021-31985 – Microsoft Defender Remote Code Execution Vulnerability...
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
...
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
...
Microsoft Windows Cryptographic Services 权限许可和访问控制问题漏洞
Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A vulnerability exists in Windows Cryptographic Services due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version...
VulnCheck KEV: CVE-2021-31199
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Recent assessments: architect00 at June 09, 2021 6:55am UTC reported: This vulnerability is abused in an exploitation chain. According to the Microsoft advisory it is abused with Adobe Acrobat CVE-2021-28550. gwillcox-...
Windows Cryptographic Services 权限许可和访问控制问题漏洞
Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A vulnerability exists in Windows Cryptographic Services due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version...
PT-2021-3270 · Microsoft · Enhanced Cryptographic Provider +1
Name of the Vulnerable Software and Affected Versions: Microsoft Enhanced Cryptographic Provider affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Enhanced Cryptographic Provider, which can be exploited to elevate privileges. This...
CVE-2021-31199
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at June 17, 2021 4:20pm UTC reported: Not got much to contribute due to limited public information at this time but I did want to note that the Confidentiality and Integrity scores for...
KLA12202 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...
VulnCheck KEV: CVE-2021-31201
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...
Adventures in Contacting the Russian FSB
KrebsOnSecurity recently had occasion to contact the Russian Federal Security Service FSB, the Russian equivalent of the U.S. Federal Bureau of Investigation FBI. In the process of doing so, I encountered a small snag: The FSBs website said in order to communicate with them securely, I needed to...
CVE-2021-28091
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...
DEBIAN-CVE-2021-28091
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...
CVE-2021-28091
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...
CVE-2021-28091
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...
