SUSE CVE-2007-6755

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...

SUSE CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

GSD-2023-1000801 selftests/bpf: Fix memory leak caused by not destroying skeleton

selftests/bpf: Fix memory leak caused by not destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

flask-mongo-skel 路径遍历漏洞

flask-mongo-skel is a Flask MongoDB framework from Shamail Tayyab's personal developer. flask-mongo-skel 2012-11-01 and earlier versions contain a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter resource or file paths for The vulnerability is...

MAL-2022-4057 Malicious code in js-lib-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 300c23e0226af335d91bfff2ee623b8ef68db10029d130c174666ddd22860de4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skeleton-js-task (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c2f3c9c7ce2f71199cea3f5c79c2259aa9f2125d429af0729153ca520c76eff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6146 Malicious code in skeleton-js-task (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c2f3c9c7ce2f71199cea3f5c79c2259aa9f2125d429af0729153ca520c76eff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5493 Malicious code in protractor-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398bc113b61996f88264d11340911401694d080a3831d6d91d2144c51c860a2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in protractor-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398bc113b61996f88264d11340911401694d080a3831d6d91d2144c51c860a2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GSD-2022-1002099 libbpf: Fix possible NULL pointer dereference when destroying skeleton

libbpf: Fix possible NULL pointer dereference when destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

PT-2022-30141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.32 Description A possible NULL pointer dereference issue exists when destroying a skeleton in libbpf. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-29830

Name of the Vulnerable Software and Affected Versions libbpf versions prior to v5.16.19 Description The issue is related to a possible NULL pointer dereference when destroying a skeleton. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-29521

Name of the Vulnerable Software and Affected Versions libbpf versions prior to v5.17.2 Description The issue is related to a possible NULL pointer dereference when destroying a skeleton. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.6 and fixe...

Mageia: Security Advisory (MGASA-2019-0155)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Dubbo 代码问题漏洞

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. It provides interface-based remote calling, fault tolerance and load balancing, and automated service registration and discovery. A security vulnerability exists in Apache...

Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry

A campaign called Operation Skeleton Key has stolen source code, software development kits, chip designs, and more...

Huawei EulerOS: Security Advisory for chrony (EulerOS-SA-2017-1158)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2019-1301)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJDK: Font layout engine out of bounds access setCurrGlyphIDCVE-2019-2698 - OpenJDK: Slow conversion of BigDecimal to...

java security update

CentOS Errata and Security Advisory CESA-2019:0790 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...