K30215094: Ruby vulnerability CVE-2016-7798

Security Advisory Description The openssl gem for Ruby uses the same initialization vector IV in GCM Mode aes--gcm when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism. CVE-2016-7798 Impact There is no impact; F5...

SUSE CVE-2016-7798

The openssl gem for Ruby uses the same initialization vector IV in GCM Mode aes--gcm when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism...

CVE-2022-30683

Adobe Experience Manager versions 6.5.13.0 and earlier is affected by a Violation of Secure Design Principles vulnerability that could lead to bypass the security feature of the encryption mechanism in the backend . An attacker could leverage this vulnerability to decrypt secrets, however, this i...

PT-2022-5045 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.13.0 and earlier Description: The issue is related to a Violation of Secure Design Principles that could allow an attacker to bypass the security feature of the encryption mechanism in the backend. This...

The vulnerability of the dsa_sign_setup function in the OpenSSL library, which relates to the disclosure of protected information, allows attackers to circumvent cryptographic mechanisms used for encryption protection.

The vulnerability of the dsasignsetup function in the OpenSSL library is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to circumvent the cryptographic mechanisms used for encryption protection...

OPENSUSE-SU-2021:1591-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS session encryption bypassing fetchmail-SA-2021-02 bsc1190069. - Update to 6.4.22 bsc1152964, jscSLE-18159, jscSLE-17903,...

SUSE-SU-2021:4018-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS session encryption bypassing fetchmail-SA-2021-02 bsc1190069. - Update to 6.4.22 bsc1152964, jscSLE-18159, jscSLE-17903,...

OPENSUSE-SU-2021:4018-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS session encryption bypassing fetchmail-SA-2021-02 bsc1190069. - Update to 6.4.22 bsc1152964, jscSLE-18159, jscSLE-17903,...

MGASA-2021-0548 Updated fetchmail packages fix security vulnerability

Update to fetchmail 6.4.24 fixes STARTTLS session encryption bypassing. CVE-2021-39272...

CVE-2021-36189

CVE-2021-36189 affects Fortinet FortiClient EMS, with vulnerable components in FortiClientEMS v7.0.1 and earlier and v6.4.4 and earlier. Root cause is missing encryption of sensitive data, enabling information disclosure when an attacker inspects browser-decrypted data via developer tools. Public...

Medium: curl

Issue Overview: A flaw was found in curl. This flaw lies in the --ssl-reqd option or related settings in libcurl. Users specify this flag to upgrade to TLS when communicating with either IMAP, POP3 or a FTP server. An attacker controlling such servers could return a crafted response which could...

RHEL 8 : firefox (RHSA-2021:4605)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4605 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

The vulnerability of the microprogramming software used in Diebold-Nixdorf RM3/CRS cash dispensers allows a perpetrator to install an outdated or modified version of the microprogramming software in order to bypass encryption and dispense cash.

The vulnerability of the microprogramming software of Diebold-Nixdorf RM3/CRS dispensers relates to the possibility of bypassing security mechanisms. Exploiting this vulnerability could allow an intruder to install a outdated or modified version of the microprogramming software, thereby...

Secure Encryption Bypass

github.com/wireapp/wire-ios is vulnerable to bypass of secure encryption. Mandatory encryption at rest feature can be pypassed when the device passcode is disabled or is not set. The users will not be aware of inactivation of encryption at rest as the feature is hidden to them...

CVE-2021-41094

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

Wire 安全漏洞

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, the ability to make voice calls, send photos, and its ingenious way of saying hello, PING. Wire has a security vulnerability that allows users of Wire by...

Design/Logic Flaw

In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154security component allows attackers to break encryption by triggering reboots...

Improper access control

Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies...

CVE-2020-19037

The CVE-2020-19037 entry concerns Halo 0.4.3 with an incorrect access control vulnerability that allows a malicious user to bypass encryption and view encrypted articles via cookies. The root cause is improper access control. The connected documents provide concrete details about the affected pro...

Espressif ESP-IDF 安全漏洞

Espressif ESP-IDF is an IoT development framework from China Lexin Information Technology Espressif. A security vulnerability exists in ESP-IDF that stems from a potential physical access toctu attack that can be used to remove encrypted partition flags from partition tables, allowing local users...