12031 matches found
CVE-2021-33846 Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
Fresenius Kabi Vigilant Software Suite Mastermed Dashboard version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users...
USN-5164-1: Linux kernel vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that the Option USB High Speed Mobile device driver in the Linux kernel did not properly handle error conditions. A physically proximate attacker could use this to...
USN-5163-1: Linux kernel vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expos...
Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®
Summary IBM has released the following fix for IBM Db2® Warehouse in response to multiple vulnerabilities found in IBM Db2®. Vulnerability Details CVEID: CVE-2021-38931 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1, and 11.5 is vulnerable to an information...
CVE-2021-23842 Use of Hard-coded Cryptographic Key
Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrieve the key from the firmware to decrypt network traffic between the AMC2 and the host system. Thus, an attacker can exploit this vulnerability to decrypt and...
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
...
The vulnerability of the dnf module in the Ansible configuration management system arises from incorrect verification of the cryptographic signature of data. This allows a perpetrator to compromise the integrity of the data and also cause service failures.
The vulnerability of the dnf module in the Ansible configuration management system is related to incorrect verification of the cryptographic signature of data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data and also cause service failures...
Fortinet FortiOS Hard-Coded Cryptographic Key (FG-IR-21-051)
The remote host is running a version of FortiOS prior to 5.6.13, 6.0.x prior or equal to 6.0.12, 6.2.x prior or equal to 6.2.8, or 6.4.x prior or equal to 6.4.5, FortiOS-6K7K version prior to 6.2.6 and 6.4.2. It is, therefore, affected by a hard-coded cryptographic key vulnerability in FortiOS...
Mozilla: Crash when handling empty pkcs7 sequence
The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...
Mozilla: Crash when handling empty pkcs7 sequence
The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...
CVE-2022-21835
Microsoft Cryptographic Services Elevation of Privilege Vulnerability...
CVE-2022-21835
Microsoft Cryptographic Services Elevation of Privilege Vulnerability...
CVE-2022-21835
Microsoft Cryptographic Services Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Cryptographic Services Elevation of Privilege Vulnerability...
CVE-2022-21835 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2022-21835
CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
Microsoft Cryptographic 权限许可和访问控制问题漏洞
Microsoft Cryptographic is an encryption service from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Cryptographic Services with privilege permission and access control issues. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...
PT-2022-1790 · Microsoft · Cryptographic Services +1
Name of the Vulnerable Software and Affected Versions: Microsoft Cryptographic Services affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Cryptographic Services, which can be exploited to elevate privileges. This could allow an attacke...