Browse CVEs

HIGH 7.5 CVE-2018-12019 The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the s… Enigmail 2.0.7+ Fix from $1,9502018-06-13 MEDIUM 5.5 CVE-2018-10407 An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not com… Carbon Black Cb Mitigation only Fix from $1,6002018-06-13 MEDIUM 5.3 CVE-2018-10470 Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefor… Little Snitch after 4.0.6 Fix from $1,6002018-06-12 HIGH 7.5 CVE-2017-16005 Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme". In versions <=0.9.11, http-signature signs only the header values, … Http Signature after 0.9.11 Fix from $1,9502018-06-04 HIGH 7.5 CVE-2016-1000342 In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible … Debian Linux after 1.55 Fix from $1,9502018-06-04 HIGH 7.5 CVE-2016-1000338 In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to… Satellite 1.56+ Fix from $1,9502018-06-01 HIGH 7.5 CVE-2018-3756 Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and b… Iroha Mitigation only Fix from $1,9502018-06-01 HIGH 8.8 CVE-2018-6664 Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint befo… Data Loss Prevention Endpoint 10.0.500 / 11.0.400+ Fix from $1,9502018-05-25 CRITICAL 9.8 CVE-2017-18146 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650… Mdm9206 Firmware Mitigation only Fix from $2,3002018-04-11 MEDIUM 5.9 CVE-2018-4111 An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-mi… Mac Os X 10.13.4+ Fix from $1,6002018-04-03 CRITICAL 9.8 CVE-2018-1000076 RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 a… Debian Linux after 2.5.0 Fix from $2,3002018-03-13 HIGH 8.1 CVE-2018-7711 HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, a… Debian Linux 1.10.6 / 1.15.4+ Fix from $1,9502018-03-05 HIGH 7.5 CVE-2018-7644 The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a rem… Simplesamlphp 1.15.3+ Fix from $1,9502018-03-05 MEDIUM 6.5 CVE-2018-0489 Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatu… Debian Linux 1.6.4 / 6.7.2+ Fix from $1,6002018-02-27 MEDIUM 5.3 CVE-2018-6459 The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remote attackers to cause a denial … Strongswan Mitigation only Fix from $1,6002018-02-20 HIGH 8.1 CVE-2017-18122 A signature-validation bypass issue was discovered in SimpleSAMLphp through 1.14.16. A SimpleSAMLphp Service Provider using SAML 1.1 will regard as v… Debian Linux after 1.14.16 Fix from $1,9502018-02-02 MEDIUM 5.9 CVE-2017-15090 An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might … Recursor after 4.0.6 Fix from $1,6002018-01-23 MEDIUM 6.5 CVE-2018-0486 Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signature… Debian Linux 1.6.3+ Fix from $1,6002018-01-13 HIGH 7.5 CVE-2018-0114EPSS 43% A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a ke… Node Jose 0.11.0+ Fix from $1,9502018-01-04 HIGH 7.5 CVE-2017-17847 An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly distinguish between an attachment s… Debian Linux 1.9.9+ Fix from $1,9502017-12-27 HIGH 7.5 CVE-2017-17848 An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for multipart/related messages becau… Debian Linux 1.9.9+ Fix from $1,9502017-12-27 MEDIUM 6.7 CVE-2017-12331 A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software … Nx Os Mitigation only Fix from $1,6002017-11-30 MEDIUM 6.7 CVE-2017-12333 A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software … Nx Os Mitigation only Fix from $1,6002017-11-30 MEDIUM 5.3 CVE-2017-8177 Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability … Hiwallet 5.0.3.100+ Fix from $1,6002017-11-22 MEDIUM 6.7 CVE-2017-8190 FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the … Fusionsphere Openstack Mitigation only Fix from $1,6002017-11-22 MEDIUM 6.8 CVE-2017-11400 An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local… Tofino Xenon Security Appliance Firmware after 3.1.0 Fix from $1,6002017-11-20 HIGH 8.1 CVE-2017-16852 shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly conf… Debian Linux 2.6.1+ Fix from $1,9502017-11-16 HIGH 8.1 CVE-2017-16853 The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly co… Debian Linux 2.6.1+ Fix from $1,9502017-11-16 MEDIUM 6.5 CVE-2017-5066 Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and… Chrome 58.0.3029.81 / 58.0.3029.83+ Fix from $1,6002017-10-27 HIGH 8.1 CVE-2017-13083 Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to … Rufus after 2.17 Fix from $1,9502017-10-18