CVE-2020-2146: Improper Verification of Cryptographic Signature

Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks...

CVE-2020-3138: Improper Verification of Cryptographic Signature

A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to install a malicious file when upgrading. The vulnerability is due to insufficient signature validation. An attacker could exploit this vulnerability by...

CVE-2020-6174

TUF aka The Update Framework through 0.12.1 has Improper Verification of a Cryptographic Signature...

CVE-2020-6174

TUF aka The Update Framework through 0.12.1 has Improper Verification of a Cryptographic Signature...

CVE-2020-6174

TUF aka The Update Framework through 0.12.1 has Improper Verification of a Cryptographic Signature...

CVE-2020-6174

TUF aka The Update Framework through 0.12.1 has Improper Verification of a Cryptographic Signature...

USN-4268-1 OpenSMTPD vulnerability

It was discovered that OpenSMTPD incorrectly verified the sender's or receiver's e-mail addresses under certain conditions. An attacker could use this vulnerability to execute arbitrary commands as root...

CVE-2020-6174: Improper Verification of Cryptographic Signature

TUF aka The Update Framework through 0.12.1 has Improper Verification of a Cryptographic Signature...

CVE-2020-7906: Improper Verification of Cryptographic Signature

In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...

CVE-2019-16753: Improper Verification of Cryptographic Signature

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2011-3374: Improper Verification of Cryptographic Signature

It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack...

CVE-2014-3585: Improper Verification of Cryptographic Signature

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions...

CVE-2019-16992: Improper Verification of Cryptographic Signature

The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation that an address at keybase.io can be used for Stellar payments to the user, which might be incompatible with a user's personal position on...

CVE-2019-11755: Improper Verification of Cryptographic Signature

A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted...

CVE-2019-12649: Improper Verification of Cryptographic Signature

A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability exists because, under certain circumstances, an affected...

Scientific Linux Security Update : ruby on SL7.x x86_64 (20190806)

Security Fixes : - ruby: HTTP response splitting in WEBrick CVE-2017-17742 - ruby: DoS by large request in WEBrick CVE-2018-8777 - ruby: Buffer under-read in Stringunpack CVE-2018-8778 - ruby: Unintentional directory traversal by poisoned NULL byte in Dir CVE-2018-8780 - ruby: Tainted flags are n...

CVE-2019-15545: Improper Verification of Cryptographic Signature

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

CVE-2019-9154

OpenPGP.js vulnerable versions:

CVE-2019-9153: Improper Verification of Cryptographic Signature

Improper Verification of a Cryptographic Signature in OpenPGP.js =4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature...

CVE-2019-9154: Improper Verification of Cryptographic Signature

Improper Verification of a Cryptographic Signature in OpenPGP.js =4.1.2 allows an attacker to pass off unsigned data as signed...