1182 matches found
SUSE: Security Advisory (SUSE-SU-2019:2891-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1601-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-27343
SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...
PT-2021-17406 · Unknown · Serenityos
Name of the Vulnerable Software and Affected Versions: SerenityOS affected versions not specified Description: The issue allows an attacker to obtain sensitive information, depending on the context, due to a buffer overflow. This occurs in the Crypto::der decode sequence function, specifically wh...
Code injection
VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebOffice Applikation."...
PT-2021-28089
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the Crypto::UnsignedBigInteger::UnsignedBigInteger function, specifically when...
PT-2021-28087
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the der decode integer function, which is called by der decode sequence and der...
PT-2021-28086
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, related to the parsing of RSA keys. The crash occurs in the Crypto::der decode sequence and...
serenity:FuzzRSAKeyParsing: Heap-buffer-overflow in Crypto::UnsignedBigInteger::UnsignedBigInteger
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5566060432588800 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRSAKeyParsing Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
serenity:FuzzRSAKeyParsing: Heap-buffer-overflow in Crypto::der_decode_integer
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6477451536498688 Project: serenity Fuzzing Engine: honggfuzz Fuzz Target: FuzzRSAKeyParsing Job Type: honggfuzzasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
[SECURITY] Fedora 33 Update: perl-Convert-ASN1-0.27-21.fc33
Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules...
CVE-2020-26816
SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...
Information disclosure
SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...
CVE-2020-26816
SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...
CVE-2020-26816: Cleartext Storage of Sensitive Information
SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...
PT-2020-16501
Name of the Vulnerable Software and Affected Versions SAP AS JAVA Key Storage Service versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Description The key material stored in the SAP NetWeaver AS Java Key Storage service is stored in the database in the DER encoded format and is not encrypted. Th...
Fedora: Security Advisory for perl-Convert-ASN1 (FEDORA-2020-d8bc3a9874)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: perl-Convert-ASN1-0.27-19.fc32
Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules...
EulerOS Virtualization 3.0.6.6 : python-ecdsa (EulerOS-SA-2020-2452)
According to the version of the python-ecdsa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER...
der-shop-am-ring.de Cross Site Scripting vulnerability OBB-1427728
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...