360 matches found
CVE-2021-45693
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...
CVE-2021-21908
Specially-crafted command line arguments can lead to arbitrary file deletion. The handledelete function does not attempt to sanitize or otherwise validate the contents of the file parameter passed to the function as argv1, allowing an authenticated attacker to supply directory traversal primitive...
Information Disclosure
atomix is vulnerable to information disclosure. An attacker can access sensitive information when a malicious Atomix node queries distributed variable primitives containing the primitive lists that ONOS nodes use to share important states...
Malicious Atomix node queries expose sensitive information
An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...
GHSA-G7P8-R2CH-4RMF Malicious Atomix node queries expose sensitive information
An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...
CVE-2020-35215
An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...
CVE-2020-35215
An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...
CVE-2020-35215
An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...
CVE-2020-35215
CVE-2020-35215 affects Atomix v3.1.5. A malicious Atomix node querying distributed variable primitives can access the full lists of primitives that ONOS nodes use to share important state, causing information disclosure. The connected Red Hat, CNVD, CVE/CVE ecosystem entries corroborate an inform...
PT-2021-11730
Name of the Vulnerable Software and Affected Versions: Atomix version 3.1.5 Description: An issue in Atomix allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives, which contain the entire primitive lists that ONOS nodes use to share...
CVE-2020-35215: Exposure of Resource to Wrong Sphere
An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...
Path traversal
keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...
CVE-2021-41117 Insecure random number generation
keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...
CVE-2021-41117
CVE-2021-41117 concerns the keypair library (JS RSA key generator) generating identical P, Q (and N) values for SSH keys due to a weak RNG. The root cause is a non-cryptographically secure fallback RNG: when window.crypto.getRandomValues() is unavailable, keypair seeds an AES-CMAC counter with a ...
The vulnerability of the Cryptographic Primitives Library in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Cryptographic Primitives Library in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
ark-bls12-377 (0.2.0), ark-crypto-primitives (0.2.0) +19 more potentially affected by CVE-2021-38194 via ark-r1cs-std (0.2.0)
ark-r1cs-std CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ark-r1cs-std and may be impacted: - ark-bls12-377 0.2.0 - ark-crypto-primitives 0.2.0 - ark-curve-constraint-tests 0.2.0 - ark-ed-on-bls12-377 0.2.0 - ark-ed-on-bls12-381...
Fedora: Security Advisory for rust-actix-http (FEDORA-2021-98066afb33)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: rust-actix-http-2.2.1-1.fc34
HTTP primitives for the Actix ecosystem...