GHSA-X4GP-PQPJ-F43Q curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

Timing variability of any kind is problematic when working with potentially secret values such as elliptic curve scalars, and such issues can potentially leak private keys and other secrets. Such a problem was recently discovered in curve25519-dalek. The Scalar29::sub 32-bit and Scalar52::sub...

curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

Timing variability of any kind is problematic when working with potentially secret values such as elliptic curve scalars, and such issues can potentially leak private keys and other secrets. Such a problem was recently discovered in curve25519-dalek. The Scalar29::sub 32-bit and Scalar52::sub...

Timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

Timing variability of any kind is problematic when working with potentially secret values such as elliptic curve scalars, and such issues can potentially leak private keys and other secrets. Such a problem was recently discovered in curve25519-dalek. The Scalar29::sub 32-bit and Scalar52::sub...

RUSTSEC-2024-0344 Timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

Timing variability of any kind is problematic when working with potentially secret values such as elliptic curve scalars, and such issues can potentially leak private keys and other secrets. Such a problem was recently discovered in curve25519-dalek. The Scalar29::sub 32-bit and Scalar52::sub...

PT-2024-40910

Name of the Vulnerable Software and Affected Versions curve25519-dalek affected versions not specified Description The issue is related to timing variability when working with potentially secret values, such as elliptic curve scalars, which can potentially leak private keys and other secrets. Thi...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the existence of a loop with an unreachable exit condition. This allows a malicious actor to cause a service failure.

The vulnerability of the FRRouting software implementation on Unix-like systems lies in the fact that it sends specially crafted welcome messages with a one-to-one distribution flag, an interval field equal to 0, or any TLV containing a mandatory sub-TLV. This allows the attacker to enter an...

PT-2024-36536 · WordPress · Wp Staging Pro

Name of the Vulnerable Software and Affected Versions: WP STAGING Pro WordPress Backup Plugin versions up to, and including, 5.6.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the sub parameter. This allows unauthenticated attacke...

CVE-2024-5551: Cross-Site Request Forgery (CSRF)

The WP STAGING Pro WordPress Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missing or incorrect nonce validation on the 'sub' parameter called from the WP STAGING WordPress Backup Plugin - Backup Duplicat...

CLSA-2024-1716916085 tomcat: Fix of CVE-2021-25329

CVE-2021-25329: use consistent approach for sub-directory checking - Fix javadoc build...

PT-2024-3812

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240516 Description A critical issue affects some unknown functionality of the file /view/vpn/autovpn/sub commit.php, allowing for os command injection through the manipulation of the key argument. This can be exploited...

Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. Ruijie Networks RG-UAC suffers from an operating system command injection vulnerability, which originates from an unknown...

The vulnerability of the Templates sub-component of Oracle Application Technology, a system for automating business processes in enterprises, allows attackers to gain access to confidential information.

The vulnerability of the Templates sub-component in Oracle Application Technology, a system for automating business operations in enterprises, related to insufficient protection of operational data. Exploiting this vulnerability could allow unauthorized actors to gain access to confidential...

CVE-2024-3291 Privilege Escalation

When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default...

CVE-2024-3289

When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation...

PT-2024-24963 · Tenable · Nessus Agent

Name of the Vulnerable Software and Affected Versions: Nessus Agent versions prior to 10.6.4 Description: The issue concerns the installation of Nessus Agent to a non-default directory on a Windows host, where secure permissions for sub-directories were not enforced in versions prior to 10.6.4...

CVE-2024-27059

In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ o...

CVE-2024-27059 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command

In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ o...

CVE-2024-27059 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command

In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ o...

CVE-2024-27059

CVE-2024-27059 refers to a Linux kernel vulnerability in the usb-storage isd200 sub-driver. The issue arises from using ATA ID values HEADS and SECTORS to derive cylinder/head for READ/WRITE CDBs; division/modulus by zero could occur if either value is 0. The fix blocks binding to devices with AT...

CVE-2024-27059 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command

In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ o...