Lucene search
+L

1000 matches found

OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.35 views

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1027)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.9AI score0.95707EPSS
SaveExploits13References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.40 views

Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2017-1016)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.9AI score0.95707EPSS
SaveExploits13References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.36 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2016-1026)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.00643EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/01/11 11:52 p.m.27 views

Updated libtomcrypt packages fix security vulnerability

Updated libtomcrypt packages fix security vulnerability: Improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data CVE-2019-17362...

9.1CVSS2.6AI score0.03108EPSS
SaveExploits1References2
OSV
OSV
added 2020/01/06 6:15 p.m.11 views

CVE-2019-9468

In exportkeyder of exportkey.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-1396834...

7.8CVSS7.2AI score0.00164EPSS
SaveExploits0References1
Mageia
Mageia
added 2020/01/05 3:37 p.m.80 views

Updated python-ecdsa packages fix security vulnerabilities

Updated python-ecdsa packages fix security vulnerabilities: It was discovered that python-ecdsa incorrectly handled certain signatures. A remote attacker could possibly use this issue to cause python-ecdsa to generate unexpected exceptions, resulting in a denial of service CVE-2019-14853. It was...

9.1CVSS2.2AI score0.02407EPSS
SaveExploits1References2
OSV
OSV
added 2020/01/02 3:15 p.m.3 views

DEBIAN-CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.9AI score0.01534EPSS
SaveExploits1References1
Prion
Prion
added 2020/01/02 3:15 p.m.25 views

Design/Logic Flaw

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.4CVSS8.7AI score0.01534EPSS
SaveExploits1References4Affected Software4
PyPA
PyPA
added 2020/01/02 3:15 p.m.11 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.5AI score0.01534EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2020/01/02 3:15 p.m.9 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.01534EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2020/01/02 2:15 p.m.42 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS7.4AI score0.01534EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/01/02 2:15 p.m.34 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

7.4CVSS8.9AI score0.01534EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2020/01/02 2:15 p.m.38 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS9.1AI score0.01534EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/12/03 12:0 a.m.27 views

SUSE SLED12 Security Update : libtomcrypt (SUSE-SU-2019:3095-1)

This update for libtomcrypt fixes the following issues : CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data bsc1153433. Note that Tenable Network Security has extracted the preceding description...

9.1CVSS7.1AI score0.03108EPSS
SaveExploits1References4
NVD
NVD
added 2019/11/26 1:15 p.m.22 views

CVE-2019-14853

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions or no exceptions at all, which could lead to a denial of service...

7.5CVSS5.6AI score0.02407EPSS
SaveExploits0References4
OSV
OSV
added 2019/11/26 1:15 p.m.9 views

PYSEC-2019-177

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions or no exceptions at all, which could lead to a denial of service...

7.5CVSS7AI score0.02407EPSS
SaveExploits0References6
Prion
Prion
added 2019/11/26 1:15 p.m.22 views

Denial of service

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions or no exceptions at all, which could lead to a denial of service...

5CVSS7.9AI score0.02407EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2019/11/26 12:6 p.m.40 views

CVE-2019-14853

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions or no exceptions at all, which could lead to a denial of service...

7.5CVSS8.2AI score0.02407EPSS
SaveExploits0
OSV
OSV
added 2019/11/21 8:37 a.m.10 views

SUSE-SU-2019:3024-1 Security update for python-ecdsa

This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding bsc1153165. - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding bsc1154217...

9.1CVSS8.3AI score0.02407EPSS
SaveExploits1References5
Ubuntu
Ubuntu
added 2019/11/18 12:42 p.m.66 views

USN-4196-1: python-ecdsa vulnerabilities

It was discovered that python-ecdsa incorrectly handled certain signatures. A remote attacker could possibly use this issue to cause python-ecdsa to generate unexpected exceptions, resulting in a denial of service. CVE-2019-14853 It was discovered that python-ecdsa incorrectly verified DER encodi...

9.1CVSS6.5AI score0.02407EPSS
SaveExploits1
Rows per page
Query Builder