PT-2018-11173

Name of the Vulnerable Software and Affected Versions LibTomCrypt versions prior to 1.18.2 Description The issue allows a memory-cache side-channel attack on ECDSA signatures, also known as the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to...

PT-2018-11176

Name of the Vulnerable Software and Affected Versions BoringSSL versions prior to 2018-06-14 Description The issue allows a memory-cache side-channel attack on DSA signatures, also known as the Return Of the Hidden Number Problem or ROHNP. An attacker can discover a DSA key if they have access to...

CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

DEBIAN-CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

ALPINE-CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

Microsoft Windows: Service: Problem Reports and Solutions Control Panel Support

The service SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.109268";...

libgcrypt -- side-channel attack vulnerability

GnuPG reports: Mitigate a local side-channel attack on ECDSA signature as described in the white paper "Return on the Hidden Number Problem"...

CVE-2018-4201

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

Delivery Controller cannot get License Server site information

The Delivery Controller cannot obtain the License Server site configuration. No License Server is registered...

CVE-2018-5429 TIBCO JasperReports Library Code Sandboxing Problem

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports...

Error: "This Operation Cannot be Performed Because a VDI is in Use by Some Other Operation"

Starting vm fail unable to find the disk OR Unable to start a VM error : "this operation cannot be performed because a VDI is in use by some other operation" OR Unable to start a VM , error : "The SR failed to complete the operation" OR Unable to start the VM , error : "This operation cannot be...

CVE-2018-4163

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

iOS: Certain Public Apps cannot be installed

When adding a public app store XenMobile server, it fails to install through the Secure Hub store on the end user's devices. No installation prompt is presented to the user and no mention of the application can be seen in XCode logs...

After Installing Update 3, Enterprise Manager GUI shows Blank

Challenge After installing Veeam 9.5 Update 3 for Enterprise Manager, the GUI shows as blank and many buttons are also missing, such as adding a Veeam Server, or starting a collection task for the Veeam server. Reference Photo of Behavior: Cause This is a browser-related problem and is likely due...

Error: " Secure Hub Could Not Connect " When NetScaler is Rebooted

After NetScaler is rebooted, the existing users are not able to connect. The following error is displayed: Secure Hub could not connect...

[SECURITY] Fedora 27 Update: icecat-52.5.3-2.fc27

GNUZilla Icecat is a fully-free fork of Mozilla Firefox ESR. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap. SpyBlock Blocks privacy trackers while in normal browsing mode, and a...

PT-2017-13984

Name of the Vulnerable Software and Affected Versions Huawei Honor 8 smartphone versions earlier than FRD-L04C567B389 Huawei Honor 8 smartphone versions earlier than FRD-L14C567B389 Description The issue is related to improper authorization configuration on specific device information, leading to...

PT-2017-15040

Name of the Vulnerable Software and Affected Versions Enigmail versions prior to 1.9.9 Description A problem has been discovered where a remote attacker can obtain cleartext content by sending an encrypted data block to a victim and relying on the victim to automatically decrypt the block and the...

December 12, 2017—KB4053579 (OS Build 14393.1944)

December 12, 2017—KB4053579 OS Build 14393.1944 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresse...

CVE-2017-9316

Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device...