CVE-2018-5376

Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpupload.php op parameter...

CVE-2018-5376

CVE-2018-5376 affects Discuz! DiscuzX X3.4, with a cross-site scripting (XSS) vulnerability exploitable via the include/cp/cp_upload.php op parameter. The underlying issue is an input handling flaw in that parameter enabling arbitrary script/HTML injection. CVSS data indicate network access with ...

PT-2018-16932

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue is related to a XSS vulnerability. It affects the includespacecpspacecp upload.php file, specifically the op parameter. Recommendations For DiscuzX version X3.4, avoid using the op parameter in the...

CVE-2018-5376: Improper Neutralization of Input During Web Page Generation

Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpupload.php op parameter...

Code injection

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

Code injection

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000412

OP-TEE (Linaro) versions 2.4.0 and older are vulnerable to a bellcore attack in the LibTomCrypt code, resulting in a compromised private RSA key. Root cause:LibTomCrypt usage within OP-TEE; affected component is the TEE implementation. Impact: potential exposure of private RSA keys. Exploitation ...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

CVE-2017-1000413 affects OP-TEE (Linaro) 2.4.0 and older. The root cause is a timing attack in the Montgomery portion of libMPA, enabling a compromised private RSA key. Documented impacts include potential exposure of private key material. Connected sources corroborate the same description; no ex...

PT-2018-5188

Name of the Vulnerable Software and Affected Versions OP-TEE versions prior to 2.4.0 Description The issue concerns a vulnerability in the LibTomCrypt code, specifically to the bellcore attack, which can result in a compromised private RSA key. Recommendations For OP-TEE versions prior to 2.4.0,...

PT-2018-5189

Name of the Vulnerable Software and Affected Versions OP-TEE versions prior to 2.4.0 Description The issue is related to a timing attack in the Montgomery parts of libMPA in OP-TEE, which can result in a compromised private RSA key. Recommendations For OP-TEE versions prior to 2.4.0, update to...