8890 matches found
OSV-2021-394 Heap-buffer-overflow in Crypto::der_decode_sequence
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30906 Crash type: Heap-buffer-overflow READ 1 Crash state: Crypto::derdecodesequence Crypto::PK::RSA::parsersakey FuzzRSAKeyParsing.cpp...
BaphoDashBoard - Dashboard For Manage And Generate The Baphomet Ransomware
With this proyect we will be able to handle the data of the victims we obtain with Baphomet Ransomware. BaphoDashBoard is developed in C under framework dotnet-core 3.1. Both Baphomet Ransomware and BaphoDashBoard proyects are thrown out for educational purposes and so we can get something out of...
Fedora 32 : 1:java-11-openjdk (2021-555c9aef71)
The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-555c9aef71 advisory. - New in release OpenJDK 11.0.10 2021-01-19: Live versions of these release notes can be found at: https://bitly.com/openjdk11010...
Fedora 32 : 1:java-1.8.0-openjdk (2021-4cebc3aff9)
The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-4cebc3aff9 advisory. - New in release OpenJDK 8u282 2021-01-19 Live versions of these release notes can be found at: https://bitly.com/openjdk8u282...
Fedora 33 : 1:java-1.8.0-openjdk (2021-09272cf059)
The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-09272cf059 advisory. - New in release OpenJDK 8u282 2021-01-19 Live versions of these release notes can be found at: https://bitly.com/openjdk8u282...
Fedora 33 : 1:java-11-openjdk (2021-5dcdf8b2b1)
The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5dcdf8b2b1 advisory. - New in release OpenJDK 11.0.10 2021-01-19: Live versions of these release notes can be found at: https://bitly.com/openjdk11010...
Huawei EulerOS: Security Advisory for nss-softokn (EulerOS-SA-2021-1155)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RSA Archer Cross-Site Scripting Vulnerability (CNVD-2021-24477)
RSA Archer is the GRC Enterprise Risk Management Suite. A stored cross-site scripting vulnerability exists in Archer versions prior to 6.8 P4. An attacker can exploit this vulnerability to execute HTML or JavaScript code...
Archer Path Disclosure Vulnerability
RSA Archer is the GRC Enterprise Risk Management Suite. A path disclosure vulnerability exists in Archer versions prior to 6.8 P2. An attacker could exploit this vulnerability to obtain sensitive information that could be used to launch further attacks...
CentOS 8 : nss and nspr (CESA-2020:3280)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3280 advisory. - nss: Use-after-free in sftkFreeSession due to improper refcounting CVE-2019-11756 - nss: Check length of inputs for cryptographic primitives...
EulerOS 2.0 SP8 : nss-softokn (EulerOS-SA-2021-1155)
According to the versions of the nss-softokn packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application...
RSA Security Archer Input Validation Error Vulnerability
RSA Security Archer is an enterprise IT governance and compliance governance product from RSA Security UK. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A security vulnerability exists in RSA Security Archer prior to...
Metasploit Framework 6.0.11 Command Injection
Exploit Title: Metasploit Framework 6.0.11 - msfvenom APK template command injection Exploit Author: Justin Steven Vendor Homepage: https://www.metasploit.com/ Software Link: https://www.metasploit.com/ Version: Metasploit Framework 6.0.11 and Metasploit Pro 4.18.0 CVE : CVE-2020-7384 !/usr/bin/e...
openSUSE Security Update : openssl-1_0_0 (openSUSE-2020-2269)
This update for openssl-100 fixes the following issues : - CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. - Initialized dh-nid to NIDundef in DHnewmethod bsc1177673. - Fixed a test failure in apachessl in fips mode bsc1177793. - Renamed BNgetrfc3526prime functions bac...
CVE-2020-20949
Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube UM1924. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the...
CVE-2020-20949
Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube UM1924. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the...
Information disclosure
Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube UM1924. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the...
CVE-2020-20949
Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube UM1924. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the...
CVE-2020-20949
Technical details for CVE-2020-20949 are not publicly available in the provided documents. Monitor for updates from vendors/authorities; current sources repeat the vulnerability description without concrete specifics (affected products, versions, or fixes).
