5388 matches found
CVE-2024-49365 tiny-secp256k1 allows for verify() bypass when running in bundled environment
tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a malicious JSON-stringifyable message can be made passing on verify, when global Buffer is the buffer package. This affects only environments where require'buffer' is the NPM buffer package. Buffer.isBuffer check can b...
CVE-2024-49365
The CVE-2024-49365 issue affects tiny-secp256k1 prior to 1.1.7, where in environments using the Node buffer package, Buffer.isBuffer can be bypassed and a crafted JSON-stringifiable object could be accepted by verify(), potentially causing false-positive True values. The root cause is a vulnerabi...
CVE-2024-49365 tiny-secp256k1 allows for verify() bypass when running in bundled environment
tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a malicious JSON-stringifyable message can be made passing on verify, when global Buffer is the buffer package. This affects only environments where require'buffer' is the NPM buffer package. Buffer.isBuffer check can b...
CVE-2024-49365: Improper Verification of Cryptographic Signature
tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a malicious JSON-stringifyable message can be made passing on verify, when global Buffer is the buffer package. This affects only environments where require'buffer' is the NPM buffer package. Buffer.isBuffer check can b...
GHSA-5VHG-9XG4-CV9M tiny-secp256k1 allows for verify() bypass when running in bundled environment
Summary A malicious JSON-stringifyable message can be made passing on verify, when global Buffer is buffer package Details This affects only environments where require'buffer' is E.g.: browser bundles, React Native apps, etc. Buffer.isBuffer check can be bypassed, resulting in strange objects bei...
tiny-secp256k1 allows for verify() bypass when running in bundled environment
Summary A malicious JSON-stringifyable message can be made passing on verify, when global Buffer is buffer package Details This affects only environments where require'buffer' is E.g.: browser bundles, React Native apps, etc. Buffer.isBuffer check can be bypassed, resulting in strange objects bei...
PT-2025-27493 · Unknown · Tiny-Secp256K1
Name of the Vulnerable Software and Affected Versions: tiny-secp256k1 versions prior to 1.1.7 Description: A malicious JSON-stringifyable message can be made to bypass the Buffer.isBuffer check, resulting in strange objects being accepted as a message. This can trick the verify function into...
OESA-2025-1690 podman security update
Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue,...
selinux:secilc-fuzzer: Use-of-uninitialized-value in __cil_verify_policycap
Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4700053073887232 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
IBM Security Verify Directory Container Privilege Escalation Command Execution
The vulnerability of the IBM Security Verify Directory integration tool’s container is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary commands...
IBM Verify Identity Access Digital Credentials Resource Reference DoS
The vulnerability of the IBM Verify Identity Access Digital Credentials access control system lies in the absence of a reference to an active, allocated resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a service failure using a specially create...
CVE-2025-1411
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...
CVE-2025-1411
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...
CVE-2025-1411
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...
CVE-2025-1411
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...
CVE-2025-1411
CVE-2025-1411 affects IBM Security Verify Directory Container versions 10.0.0.0–10.0.3.1. The root cause is execution with unnecessary privileges, allowing a local user to run commands as root. Affects the Directory Container and related components (verify-directory-server, -proxy, -webadmin, -vi...
CVE-2025-1411 IBM Security Verify Directory Container command execution
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...
CVE-2025-1411: Execution with Unnecessary Privileges
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...
IBM Security Verify Directory 安全漏洞
IBM Security Verify Directory is part of an authentication and access management solution from International Business Machines IBM. A security vulnerability exists in IBM Security Verify Directory versions 10.0.0.0 through 10.0.3.1, which stems from excessive privileges that could cause a local...