Lucene search
+L

8889 matches found

Mageia
Mageia
added 2021/10/02 6:57 p.m.147 views

Updated python-rsa packages fix security vulnerability

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA. CVE-2020-25658...

7.5CVSS3.7AI score0.01651EPSS
SaveExploits1References2
OSV
OSV
added 2021/10/02 6:57 p.m.15 views

MGASA-2021-0456 Updated python-rsa packages fix security vulnerability

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA. CVE-2020-25658...

7.5CVSS7.4AI score0.01651EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/10/02 12:00 a.m.21 views

Fedora: Security Advisory for python-rsa (FEDORA-2021-15e50503d6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.2AI score0.01651EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/10/02 12:00 a.m.18 views

Fedora: Security Advisory for python-rsa (FEDORA-2021-783a157adc)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.2AI score0.01651EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/10/02 12:00 a.m.19 views

Fedora: Security Advisory for python-rsa (FEDORA-2021-c1fef03e71)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.2AI score0.01651EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/30 4:09 p.m.99 views

Security Bulletin: Multiple vulnerabilities in Bouncy Castle Java Cryptography affect IBM Tivoli Business Manager

Summary Bouncy Castle Java Cryptography is shipped as part of IBM Tivoli Business Manager 6.2.0. Information about security vulnerabilities affecting Bouncy Castle Java Cryptography has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-5382 DESCRIPTION: Bouncy Castle...

10CVSS6.7AI score0.35584EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/29 12:00 a.m.48 views

Rucky encryption problem vulnerability

Rucky is an Android application that performs the Usb Hid attack Rubber Duck in multiple ways. Rucky is vulnerable to an encryption issue that stems from the use of weak encryption algorithms RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for releases and after 426 for nightly releases. ...

7.5CVSS0.4AI score0.00668EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/09/28 12:00 a.m.18 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2512)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.02708EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/09/28 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2021-2542)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.78675EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2021/09/28 12:00 a.m.20 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2560)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8AI score0.02708EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/09/28 12:00 a.m.18 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2536)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8AI score0.02708EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/27 8:15 p.m.22 views

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

7.5CVSS6.9AI score
SaveExploits0References2
Prion
Prion
added 2021/09/27 8:15 p.m.28 views

Security feature bypass

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

5CVSS7.5AI score0.00668EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/09/27 7:25 p.m.63 views

CVE-2021-41096

The CVE-2021-41096 entry concerns the Rucky Android USB HID Rubber Ducky Launch Pad. Affected releases (versions 2.2 and earlier for release builds; 425 and earlier for nightly builds) use a weak cryptographic algorithm (RSA/ECB/PKCS1Padding) for encryption. The issue is addressed in v2.3 for rel...

7.5CVSS7.5AI score0.00668EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.35 views

EulerOS 2.0 SP9 : nettle (EulerOS-SA-2021-2536)

According to the versions of the nettle package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the...

8.1CVSS6.4AI score0.02708EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.57 views

EulerOS 2.0 SP9 : shim (EulerOS-SA-2021-2542)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect te...

7.5CVSS6.6AI score0.78675EPSS
SaveExploits4References10
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.45 views

EulerOS 2.0 SP9 : nettle (EulerOS-SA-2021-2560)

According to the versions of the nettle package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the...

8.1CVSS6.4AI score0.02708EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.39 views

EulerOS 2.0 SP5 : nettle (EulerOS-SA-2021-2512)

According to the versions of the nettle packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a...

7.5CVSS6.3AI score0.02708EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.45 views

EulerOS 2.0 SP9 : shim (EulerOS-SA-2021-2566)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect tex...

7.5CVSS6.6AI score0.78675EPSS
SaveExploits4References10
Fedora
Fedora
added 2021/09/24 8:55 p.m.52 views

[SECURITY] Fedora 35 Update: python-rsa-4.7.2-1.fc35

Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...

7.5CVSS3.2AI score0.01651EPSS
SaveExploits1
Rows per page
Query Builder