Lucene search
+L

144 matches found

OSV
OSV
added 2022/03/18 12:21 a.m.18 views

GSD-2022-1000818 KVM: x86/mmu: make apf token non-zero to fix bug

KVM: x86/mmu: make apf token non-zero to fix bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/03/18 12:15 a.m.21 views

GSD-2022-1000752 KVM: x86/mmu: make apf token non-zero to fix bug

KVM: x86/mmu: make apf token non-zero to fix bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/03/03 6:15 p.m.2 views

DEBIAN-CVE-2022-26126

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isisnbnotifications.c...

7.8CVSS7.7AI score0.01085EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/03/03 12:00 a.m.7 views

PT-2022-17689 · Frrouting +3 · Frrouting +3

Name of the Vulnerable Software and Affected Versions: FRRouting versions through 8.1.0 Description: Buffer overflow vulnerabilities exist due to the use of strdup with a non-zero-terminated binary string in isis nb notifications.c. Recommendations: For versions through 8.1.0, as a temporary...

9.8CVSS7.8AI score0.02412EPSS
SaveExploits9References105
AlpineLinux
AlpineLinux
added 2022/03/03 12:00 a.m.80 views

CVE-2022-26126

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isisnbnotifications.c...

7.8CVSS8.1AI score0.01085EPSS
SaveExploits1
Mageia
Mageia
added 2022/01/25 12:13 p.m.85 views

Updated mysql-connector-c++ packages fix security vulnerability

Buffer overflow due to inccorect calculation in EVPPKEYdecrypt. CVE-2021-3711 Denial of Service attack due to possible non-zero terminated strings. CVE-2021-3712...

9.8CVSS8.3AI score0.87816EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/11/11 12:00 a.m.14 views

Stark Bank Data Forgery Problem Vulnerability (CNVD-2021-95641)

Stark Bank is a banking API for individual developers in Brazil. performs all banking operations through the API, simplifying and automating payments, facilitating reconciliations and scaling operations. A data forgery issue vulnerability exists in Stark Bank Ecdsa-java, which stems from a failur...

9.8CVSS6.7AI score0.01027EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2021/11/10 8:58 p.m.54 views

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS5.1AI score0.01027EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/11/10 8:48 p.m.16 views

GHSA-R28H-X6HV-2FQ3 Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS7.3AI score0.01027EPSS
SaveExploits1References6
OSV
OSV
added 2021/11/10 8:41 p.m.79 views

GHSA-92VM-MXJF-JQF3 Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS9.4AI score0.01238EPSS
SaveExploits1References6
NVD
NVD
added 2021/11/09 10:15 p.m.31 views

CVE-2021-43570

The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS0.01027EPSS
SaveExploits1References2
OSV
OSV
added 2021/11/09 10:15 p.m.21 views

CVE-2021-43572

The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS9.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/11/09 10:15 p.m.6 views

CVE-2021-43572

The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS7.4AI score0.01238EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/11/09 10:15 p.m.3 views

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS7.4AI score0.01027EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/11/09 10:15 p.m.4 views

CVE-2021-43569

The verify function in the Stark Bank .NET ECDSA library ecdsa-dotnet 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS7.4AI score0.01056EPSS
SaveExploits1References3
PyPA
PyPA
added 2021/11/09 10:15 p.m.13 views

PYSEC-2021-426

The verify function in the Stark Bank Python ECDSA library ecdsa-python 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS7.1AI score0.01238EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/11/09 9:05 p.m.35 views

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.7AI score0.01027EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/11/09 9:05 p.m.32 views

CVE-2021-43572

The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.7AI score0.01238EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.15 views

Stark Bank 数据伪造问题漏洞

Stark Bank is a banking API for individual developers in Brazil.Perform all banking operations through an API that simplifies and automates payments, facilitates reconciliations, and scales operations. Stark Bank Ecdsa-node suffers from a Data Forgery Issue vulnerability that stems from the...

9.8CVSS5.9AI score0.01027EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.10 views

Stark Bank 数据伪造问题漏洞

Stark Bank is a banking API for individual developers in Brazil.Perform all banking operations through an API that simplifies and automates payments, facilitates reconciliations, and scales operations. Stark Bank ecdsa-elixir suffers from a Data Forgery Issue vulnerability that stems from the...

9.8CVSS5.9AI score0.01055EPSS
SaveExploits1References3
Rows per page
Query Builder