Lucene search
K

8 matches found

OSV
OSV
added 2026/04/18 1:14 a.m.0 views

GHSA-452V-W3GX-72WG Zebra has rk Identity Point Panic in Transaction Verification

rk Identity Point Panic in Transaction Verification Summary Orchard transactions contain a rk field which is a randomized validating key and also an elliptic curve point. The Zcash specification allows the field to be the identity a "zero" value, however, the orchard crate which is used to verify...

9.2CVSS5.7AI score0.00055EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/04/18 1:14 a.m.7 views

Zebra has rk Identity Point Panic in Transaction Verification

rk Identity Point Panic in Transaction Verification Summary Orchard transactions contain a rk field which is a randomized validating key and also an elliptic curve point. The Zcash specification allows the field to be the identity a "zero" value, however, the orchard crate which is used to verify...

9.2CVSS5.7AI score0.00055EPSS
Exploits0References3Affected Software2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-3414

Malware in sbrugna...

5CVSS6.3AI score0.00477EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/21 8:16 p.m.2 views

CVE-2006-3418

Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...

5CVSS7AI score0.00477EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/19 12:0 a.m.2 views

Parabirb wrongthink 安全漏洞

Parabirb wrongthink is Parabirb an open source application . It provides an end-to-end encryption feature. A security vulnerability exists in wrongthink from version 2.0.0 and before 2.3.0, which stems from a partial disclosure of a secret identity key through a fingerprint used for connection...

8.1CVSS7.3AI score0.00061EPSS
Exploits0References2
NVD
NVD
added 2006/07/07 12:5 a.m.11 views

CVE-2006-3418

Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...

5CVSS6.6AI score0.00477EPSS
Exploits0References4
OSV
OSV
added 2006/07/07 12:5 a.m.1 views

DEBIAN-CVE-2006-3418

Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...

5CVSS6.9AI score0.00477EPSS
Exploits0References1
Cvelist
Cvelist
added 2006/07/07 12:0 a.m.13 views

CVE-2006-3418

Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications...

6.6AI score0.00477EPSS
Exploits0References4
Rows per page
Query Builder