0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +3063 more potentially affected by CVE-2023-50782 via cryptography (>=0.6.1 <=41.0.7)

cryptography PYPI version =0.6.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.0.0rc0 and more Source cves: CVE-2023-50782 Source advisory: OSV:GHSA-3WW4-GG4F-JR7F...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +3072 more potentially affected by CVE-2024-0727 via cryptography (>=0.6.1 <=42.0.1)

cryptography PYPI version =0.6.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.0.0rc0 and more Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...

DEBIAN-CVE-2024-0727

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates...

aad-fastapi (>=1.0.0 <=1.1.2), aad-fastapi-dl37 (>=1.0.0 <=1.0.3) +1263 more potentially affected by CVE-2023-49083 via cryptography (>=3.1.0 <=41.0.5)

cryptography PYPI version =3.1.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =0.4.7, =0.0.1, =0.1.1, =0.0.1, =1.77.3, =1.2.4, =0.0.3, =0.0.8 - aioasuswrt =1.3.3 and more Source cves: CVE-2023-49083 Source advisory: OSV:GHSA-JFHM-5GHH-2F97...

python-cryptography: memory corruption via immutable objects

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

USN-6400-1 python2.7, python3.5 vulnerability

It was discovered that Python did not properly provide constant-time processing for a crypto operation. An attacker could possibly use this issue to perform a timing attack and recover sensitive information...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +2429 more potentially affected by unknown CVE via cryptography (>=2.5.0 <=41.0.3)

cryptography PYPI version =2.5.0, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.0.0rc0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V8GR-M533-GHJ9...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +2531 more potentially affected by unknown CVE via cryptography (>=0.8.1 <=41.0.2)

cryptography PYPI version =0.8.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.0.0rc0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JM77-QPHF-C4W8...

Silver vulnerable to MitM attack against implants due to a cryptography vulnerability

Summary The current cryptography implementation in Sliver up to version 1.5.39 allows a MitM with access to the corresponding implant binary to execute arbitrary codes on implanted devices via intercepted and crafted responses. Reserved CVE ID: CVE-2023-34758 Details Please see the PoC repo. PoC...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +2475 more potentially affected by unknown CVE via cryptography (>=0.6.1 <=40.0.2)

cryptography PYPI version =0.6.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.0.0rc0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5CPQ-8WJ7-HF2V...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +1553 more potentially affected by CVE-2023-23931 via cryptography (>=1.8.1 <=39.0.0)

cryptography PYPI version =1.8.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =2.6.3, =1.0.4, =2.8.1, =0.4.0, =2.0.0, =0.1.1, =0.1.15 and more Source cves: CVE-2023-23931 Source advisory: OSV:PYSEC-2023-11...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +1553 more potentially affected by CVE-2023-23931 via cryptography (>=1.8.1 <=39.0.0)

cryptography PYPI version =1.8.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =2.6.3, =1.0.4, =2.8.1, =0.4.0, =2.0.0, =0.1.1, =0.1.15 and more Source cves: CVE-2023-23931 Source advisory: OSV:GHSA-W7PP-M8WF-VJ6R...

GE Digital Proficy Historian 加密问题漏洞

GE Digital Proficy Historian is a powerful tool with storage analysis and data collection capabilities from GE Digital. A security vulnerability exists in GE Digital Proficy Historian version 7.0 and later. An attacker could exploit the vulnerability to decrypt sensitive data, such as usernames a...

aadinspector (>=1.0.0 <=1.1.6), accomate (>=1.0.4 <=2.0.0rc0) +398 more potentially affected by unknown CVE via cryptography (>=37.0.0 <=38.0.2)

cryptography PYPI version =37.0.0, =1.0.0, =1.0.4, =1.161.2, =0.2.0, =3.0.1, =3.0.2, =1.3.0, =2.2.1, =2022.9.0b2, =0.3.0, =0.8.0a3, =0.0.1, =0.0.2 - applepassgenerator-reloaded =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-39HC-V87J-747X...

atlassian-jwt-auth (>=1.0.9 <=2.8.0), cloudmesh-client (>=4.2.6 <=4.4.0) +44 more potentially affected by CVE-2016-9243 via cryptography (>=0.6.1 <=1.5.2)

cryptography PYPI version =0.6.1, =1.0.9, =4.2.6, =0.9.5, =0.0.1, =0.0.1, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.3 and more Source cves: CVE-2016-9243 Source advisory: OSV:GHSA-Q3CJ-2R34-2CWC...

CVE-2021-31796

An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough information that the number of possible keys for a credential file is only one, and the number is usually not higher than 2^3...

Rust 数据伪造问题漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in libsecp256k1 crate before Rust 0.5.0, which stems from libsecp256k1 crate allowing R or S arguments to be greater than curve order...

python-cryptography: Bleichenbacher timing oracle attack against RSA decryption

A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality...

ALPINE-CVE-2020-36242

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class...

activedirectoryenum (>=0.4.7 <=0.5.0), airflow-run (=0.4.9) +215 more potentially affected by CVE-2020-36242 via cryptography (>=3.1.0 <=3.3.1)

cryptography PYPI version =3.1.0, =0.4.7, =0.117.0b0, =0.8.0, =2.0.1, =8.0.1, =0.0.3, =0.9.1, =0.11.0 - azureml-accel-models =1.23.0 - azureml-cli-common =1.23.0 - azureml-contrib-fairness =1.23.0 - azureml-contrib-functions =1.23.0 - azureml-contrib-gbdt =1.23.0 - azureml-contrib-interpret =1.23...