Lucene search
+L

2052 matches found

CNVD
CNVD
added 2021/11/11 12:0 a.m.54 views

Stark Bank Data Forgery Problem Vulnerability (CNVD-2021-95643)

Stark Bank is a banking API for individual developers in Brazil.Perform all banking operations through an API that simplifies and automates payments, facilitates reconciliations, and scales operations. Stark Bank ecdsa-dotnet suffers from a Data Forgery Issue vulnerability that stems from the...

9.8CVSS6.7AI score0.01022EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/11 12:0 a.m.9 views

Stark Bank Data Forgery Problem Vulnerability (CNVD-2021-95641)

Stark Bank is a banking API for individual developers in Brazil. performs all banking operations through the API, simplifying and automating payments, facilitating reconciliations and scaling operations. A data forgery issue vulnerability exists in Stark Bank Ecdsa-java, which stems from a failur...

9.8CVSS6.7AI score0.00994EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/11 12:0 a.m.73 views

Stark Bank Data Forgery Issue Vulnerability (CNVD-2021-95644)

Stark Bank is a banking API for individual developers in Brazil that performs all banking operations through the API, simplifying and automating payments, facilitating reconciliations, and scaling operations. a data forgery issue vulnerability exists in Stark Bank python-ecdsa, which stems from t...

9.8CVSS2.1AI score0.01198EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.22 views

Mozilla Firefox Security Advisory (MFSA2015-64) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS4.5AI score0.03594EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2021/11/10 8:58 p.m.9 views

starkbank (>=0.0.1 <=0.0.6) potentially affected by CVE-2021-43571 via starkbank-ecdsa (>=0.0.1 <=0.0.2)

starkbank-ecdsa NPM version =0.0.1, =0.0.1, =0.0.6 Source cves: CVE-2021-43571 Source advisory: OSV:GHSA-Q9Q6-F556-GPM7...

9.8CVSS7.2AI score0.00994EPSS
SaveExploits1
OSV
OSV
added 2021/11/10 8:58 p.m.26 views

GHSA-Q9Q6-F556-GPM7 Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS9.4AI score0.00994EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/11/10 8:58 p.m.47 views

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS5.1AI score0.00994EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/11/10 8:58 p.m.31 views

GHSA-J3JW-J2J8-2WV9 Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank .NET ECDSA library ecdsa-dotnet 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS9.4AI score0.01022EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/11/10 8:58 p.m.57 views

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank .NET ECDSA library ecdsa-dotnet 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS5.1AI score0.01022EPSS
SaveExploits1References4Affected Software1
vulnersOsv
vulnersOsv
added 2021/11/10 8:48 p.m.4 views

com.starkbank.sdk:sdk-java (>=0.2.3 <=0.3.0), com.starkbank:sdk (>=0.3.0 <=2.8.0) potentially affected by CVE-2021-43570 via com.starkbank.ellipticcurve:starkbank-ecdsa (=1.0.0)

com.starkbank.ellipticcurve:starkbank-ecdsa MAVEN version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.starkbank.ellipticcurve:starkbank-ecdsa and may be impacted: - com.starkbank.sdk:sdk-java =0.2.3, =0.3.0, =2.8.0 Source cves:...

9.8CVSS7.2AI score0.00994EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2021/11/10 8:48 p.m.34 views

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS5.1AI score0.00994EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2021/11/10 8:41 p.m.69 views

GHSA-92VM-MXJF-JQF3 Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS9.4AI score0.01198EPSS
SaveExploits1References6
vulnersOsv
vulnersOsv
added 2021/11/10 8:41 p.m.5 views

c7n-mailer (>=0.6.4 <=0.6.12), jesse (>=2.2.0 <=2.3.4) +7 more potentially affected by CVE-2021-43572 via starkbank-ecdsa (>=1.0.0 <=1.1.1)

starkbank-ecdsa PYPI version =1.0.0, =0.6.4, =2.2.0, =1.0.1, =1.0.1, =1.3.0, =6.8.3, =6.9.0 - starkbank =0.1.0 Source cves: CVE-2021-43572 Source advisory: OSV:GHSA-92VM-MXJF-JQF3...

9.8CVSS7.2AI score0.01198EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2021/11/10 8:41 p.m.46 views

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS5AI score0.01198EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
added 2021/11/10 3:54 a.m.29 views

Signature Verification Bypass

starkbank-ecdsa is vulnerable to signature verification bypass. An attacker can forge the signatures on arbitrary messages to verify any public key, authenticating as any user on the stark bank platform...

9.8CVSS3.3AI score0.00994EPSS
SaveExploits1References12Affected Software1
NVD
NVD
added 2021/11/09 10:15 p.m.40 views

CVE-2021-43569

The verify function in the Stark Bank .NET ECDSA library ecdsa-dotnet 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS0.01022EPSS
SaveExploits1References2
NVD
NVD
added 2021/11/09 10:15 p.m.25 views

CVE-2021-43572

The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS0.01198EPSS
SaveExploits1References3
NVD
NVD
added 2021/11/09 10:15 p.m.37 views

CVE-2021-43568

The verify function in the Stark Bank Elixir ECDSA library ecdsa-elixir 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS0.01022EPSS
SaveExploits1References2
NVD
NVD
added 2021/11/09 10:15 p.m.28 views

CVE-2021-43570

The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS0.00994EPSS
SaveExploits1References2
NVD
NVD
added 2021/11/09 10:15 p.m.29 views

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS0.00994EPSS
SaveExploits1References2
Rows per page
Query Builder