Lucene search
K

44 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-0907

Malware in sbrugna...

5CVSS8.5AI score0.02774EPSS
Exploits0References32
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-6375

Malware in sbrugna...

5.3CVSS5.6AI score0.00274EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-0011

Malware in sbrugna...

5.3CVSS5.2AI score0.00365EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.1 views

SUSE CVE-2012-0884

The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack MMA adaptive chosen ciphertext...

5CVSS8.4AI score0.02774EPSS
Exploits0References10
Github Security Blog
Github Security Blog
added 2022/05/17 3:39 a.m.15 views

jwcrypto lacks the Random Filling protection mechanism

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS6.5AI score0.00365EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2022/05/17 3:39 a.m.6 views

GHSA-WG33-X934-3GHH jwcrypto lacks the Random Filling protection mechanism

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

6CVSS5AI score0.00365EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2016-0208)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00583EPSS
Exploits0References5
Veracode
Veracode
added 2017/02/09 1:46 a.m.28 views

Million Message Attack (MMA)

OpenSSL is vulnerable to million message attacks MMA. This is due to the way that OpenSSL has implemented PKCS 7 and Cryptographic Message Syntax CMS, making it easier for attackers to decrypt data...

5CVSS8.4AI score0.02774EPSS
Exploits0References24Affected Software1
NVD
NVD
added 2016/09/03 8:59 p.m.9 views

CVE-2016-5430

The RSA 1.5 algorithm implementation in the JOSEJWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS5.1AI score0.00274EPSS
Exploits0References2
Prion
Prion
added 2016/09/03 8:59 p.m.16 views

Design/Logic Flaw

The RSA 1.5 algorithm implementation in the JOSEJWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5CVSS7AI score0.00274EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/09/03 8:0 p.m.14 views

CVE-2016-5430

The RSA 1.5 algorithm implementation in the JOSEJWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.1AI score0.00274EPSS
Exploits0References2
CVE
CVE
added 2016/09/03 8:0 p.m.34 views

CVE-2016-5430

The CVE-2016-5430 entry affects jose-php prior to 2.2.1, where the RSA-1.5 implementation in JOSE_JWE/JWE.php lacks a Random Filling protection mechanism. This omission enables a remote attacker to obtain plaintext data via a Million Message Attack (MMA). Affected component: jose-php’s JWE.php wi...

5.3CVSS5.1AI score0.00274EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2016/09/01 11:59 p.m.1 views

DEBIAN-CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS5.6AI score0.00365EPSS
Exploits0References1
NVD
NVD
added 2016/09/01 11:59 p.m.5 views

CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS5AI score0.00365EPSS
Exploits0References5
OSV
OSV
added 2016/09/01 11:59 p.m.0 views

UBUNTU-CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS6.1AI score0.00365EPSS
Exploits0References5
OSV
OSV
added 2016/09/01 11:59 p.m.16 views

PYSEC-2016-4

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS4.6AI score0.00365EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2016/09/01 11:59 p.m.13 views

CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS6.1AI score0.00365EPSS
Exploits0References4
Prion
Prion
added 2016/09/01 11:59 p.m.8 views

Design/Logic Flaw

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

4.3CVSS6.8AI score0.00365EPSS
Exploits0References5Affected Software1
PyPA
PyPA
added 2016/09/01 11:59 p.m.4 views

PYSEC-2016-4

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS6.8AI score0.00365EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2016/09/01 11:0 p.m.19 views

CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS5AI score0.00365EPSS
Exploits0
Rows per page
Query Builder