Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 8:5 p.m.9 views

CVE-2022-22069

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.8CVSS7.1AI score0.00021EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:58 a.m.1 views

SUSE CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc...

8.1CVSS8AI score0.15103EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2022/09/02 12:15 p.m.3 views

CVE-2022-22069

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.8CVSS7.1AI score0.00021EPSS
Exploits0References2
Prion
Prion
added 2022/09/02 12:15 p.m.21 views

Design/Logic Flaw

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

4.3CVSS7.7AI score0.00021EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/09/02 11:31 a.m.18 views

CVE-2022-22069

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.7CVSS7.9AI score0.00021EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/09/02 12:0 a.m.6 views

PT-2022-15218 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue affects devices with keyprotect off, which may store an unencrypted keybox in RPMB, causing a cryptographic issue. This problem is present in various Snapdragon...

7.8CVSS7.6AI score0.00021EPSS
Exploits0References3
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/09/11 6:28 a.m.43 views

360lock Smart Lock Review

Two years ago I helped kick start a smart lock, the 360lock. It finally arrived this week. It has different modules like a keybox below and a bike chain. I originally live tweeted the hack on Tuesday Sep 8, 2020. So, how good is it? Blockchain integration! According to the website the 360lock has...

6.8AI score
Exploits0
OSV
OSV
added 2019/11/20 7:15 p.m.1 views

DEBIAN-CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

5.5CVSS6AI score0.0063EPSS
Exploits0References1
Prion
Prion
added 2019/11/20 7:15 p.m.24 views

Design/Logic Flaw

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

4.3CVSS6.8AI score0.0063EPSS
Exploits0References9Affected Software2
CVE
CVE
added 2019/11/20 6:30 p.m.103 views

CVE-2015-1607

Technical details of CVE-2015-1607 are not provided in the connected documents. The Initial Description mentions GNUPG but lacks vendor/product/version specifics beyond that. Monitor for updates.

5.5CVSS5.1AI score0.0063EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2019/11/20 6:30 p.m.21 views

CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

5.4AI score0.0063EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2019/11/20 6:30 p.m.21 views

CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

5.5CVSS5.6AI score0.0063EPSS
Exploits0
Kitploit
Kitploit
added 2015/07/20 9:19 p.m.23 views

KeyBox - A web-based SSH console that centrally manages administrative access to systems

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. Administrators can login...

7.7AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2010/08/05 12:0 a.m.24 views

CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc...

8.1CVSS7.5AI score0.15103EPSS
Exploits0References4
Rows per page
Query Builder