Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2021/11/10 8:58 p.m.•63 views

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS5.1AI score0.01027EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2021/11/09 9:05 p.m.•2 views

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS0.01027EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/09 12:00 a.m.•6 views

CVE-2021-43571: Improper Verification of Cryptographic Signature

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

9.8CVSS5.9AI score0.01027EPSS
SaveExploits1References2
Rows per page
Query Builder