Lucene search
K

7 matches found

Snyk
Snyk
added 2026/02/21 2:3 a.m.5 views

Division by zero

Overview org.webjars.npm:jsrsasign is a free pure JavaScript cryptographic library. Affected versions of this package are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt reduction logic in ext/jsbn.js. An attacker can force RS...

5.9CVSS5.9AI score0.00012EPSS
Exploits1References2
OSV
OSV
added 2023/06/28 6:15 p.m.2 views

CVE-2023-21178

In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-14076241...

4.1CVSS5.9AI score0.0002EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/06/28 6:15 p.m.2 views

CVE-2023-21178

In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-14076241...

4.1CVSS6.1AI score0.0002EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/06/28 12:0 a.m.13 views

CVE-2023-21178

In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-14076241...

4.4AI score0.0002EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/28 12:0 a.m.3 views

PT-2023-17966 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the installKey function of KeyUtil.cpp, a possible failure of file encryption due to a race condition could lead to local information disclosure. This issue requires System execution privileges and...

4.1CVSS3.9AI score0.0002EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/06/28 12:0 a.m.2 views

Google Pixel 竞争条件问题漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in installKey in KeyUtil.cpp, where file encryption may fail due to a competitive condition, which could lead to local information disclosure...

4.1CVSS5.1AI score0.0002EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2014/07/29 12:0 a.m.24 views

Oracle JRockit R27 < R27.8.3.9 / R28 < R28.3.3.10 Multiple Vulnerabilities (July 2014 CPU)

The remote host has a version of Oracle JRockit that is affected by multiple vulnerabilities that could allow a remote user to affect the confidentiality of the system via : - A design flaw in the RSA 'blinding' security component of the 'RASCore' class. By performing operations requiring the use...

4CVSS7AI score0.06322EPSS
Exploits0References3
Rows per page
Query Builder