NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
83989  CVE-2016-9123  go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures. An integer overflow could lead to authentication bypass for CBC-HMAC encrypted ciphertexts on 32-bit architectures.    2  5  Medium  2017-03-29  2017-03-29  View
83988  CVE-2016-9122  go-jose before 1.0.4 suffers from multiple signatures exploitation. The go-jose library supports messages with multiple signatures. However, when validating a signed message the API did not indicate which signature was valid, which could potentially lead to confusion. For example, users of the library might mistakenly read protected header values from an attached signature that was different from the one originally validated.    2  5  Medium  2017-03-29  2017-03-29  View
83987  CVE-2016-9121  go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.    2  6.4  Medium  2017-03-29  2017-03-29  View
22280  CVE-2016-9120  Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) by calling ION_IOC_FREE on two CPUs at the same time.    2  9.3  High  2017-01-19  2016-12-09  View
82114  CVE-2016-9119  Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.    2  4.3  Medium  2017-02-08  2017-02-03  View

Page 1087 of 17672, showing 5 records out of 88360 total, starting on record 5431, ending on 5435

<<first 1083 | 1084 | 1085 | 1086 | 1087 | 1088 | 1089 | 1090 | 1091 last>>

Actions