Lucene search
+L

20 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-0076

Malware in sbrugna...

9.1CVSS7.5AI score0.01534EPSS
SaveExploits1References17
SUSE CVE
SUSE CVE
•added 2023/02/15 4:09 a.m.•10 views

SUSE CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.8CVSS6.5AI score0.01534EPSS
SaveExploits1References18
RedHat Linux
RedHat Linux
•added 2021/11/16 3:43 p.m.•18 views

python-ecdsa: DER encoding is not being verified in signatures

A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false...

9.1CVSS5.7AI score0.01534EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2021/09/14 12:00 a.m.•40 views

EulerOS 2.0 SP2 : python-ecdsa (EulerOS-SA-2021-2429)

According to the version of the python-ecdsa package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without...

9.1CVSS6.9AI score0.01534EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2020/06/26 12:00 a.m.•51 views

Huawei EulerOS: Security Advisory for python2-ecdsa (EulerOS-SA-2020-1711)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.01534EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2020/04/01 4:35 p.m.•99 views

Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS2.8AI score0.01534EPSS
SaveExploits1References11Affected Software1
OSV
OSV
•added 2020/04/01 4:35 p.m.•16 views

GHSA-8QXJ-F9RH-9FG2 Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.3CVSS5.8AI score0.01534EPSS
SaveExploits1References12
NVD
NVD
•added 2020/01/02 3:15 p.m.•26 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS8AI score0.01534EPSS
SaveExploits1References4
OSV
OSV
•added 2020/01/02 3:15 p.m.•8 views

DEBIAN-CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.9AI score0.01534EPSS
SaveExploits1References1
OSV
OSV
•added 2020/01/02 3:15 p.m.•10 views

PYSEC-2020-182

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.8AI score
SaveExploits0References4
Prion
Prion
•added 2020/01/02 3:15 p.m.•29 views

Design/Logic Flaw

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.4CVSS8.7AI score0.01534EPSS
SaveExploits1References4Affected Software4
PyPA
PyPA
•added 2020/01/02 3:15 p.m.•15 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.5AI score0.01534EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2020/01/02 3:15 p.m.•14 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.01534EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2020/01/02 2:15 p.m.•45 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS7.4AI score0.01534EPSS
SaveExploits1
Cvelist
Cvelist
•added 2020/01/02 2:15 p.m.•40 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

7.4CVSS8.9AI score0.01534EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2020/01/02 2:15 p.m.•44 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS9.1AI score0.01534EPSS
SaveExploits1
CVE
CVE
•added 2020/01/02 2:15 p.m.•251 views

CVE-2019-14859

CVE-2019-14859 affects the Python library python-ecdsa. A flaw exists in all versions before 0.13.3 where signatures are not properly verified for DER encoding, allowing a malformed signature to be accepted and making signatures malleable. This could enable an attacker to use a malleable signatur...

9.1CVSS8.8AI score0.01534EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/02 12:00 a.m.•2 views

CVE-2019-14859: Improper Verification of Cryptographic Signature

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.9AI score0.01534EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2019/10/14 12:00 a.m.•29 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.01534EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2019/10/11 1:30 p.m.•30 views

CVE-2019-14859

A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false...

9.1CVSS1.9AI score0.01534EPSS
SaveExploits1References5
Rows per page
Query Builder