Skip to content
OpenAdvisories

Archive

9 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /9 December 2021 →
  1. 169
  2. 297
  3. 378
  4. 467
  5. 588
  6. 6 
  7. 76
  8. 891
  9. 971
  10. 10131
  11. 1123
  12. 1273
  13. 1314
  14. 1417
  15. 1566
  16. 1649
  17. 17106
  18. 1873
  19. 1973
  20. 2019
  21. 211
  22. 2254
  23. 2389
  24. 2444
  25. 251
  26. 2617
  27. 271
  28. 282
  29. 2953
  30. 3049
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-43568

    ecdsa-elixir fails to check signatures, vulnerable to message forging

    The verify function in the Stark Bank Elixir ECDSA library (ecdsa-elixir) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

    ecdsa-elixir Hex
  • Critical 9.8
    CVE-2021-43570

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

    com.starkbank.ellipticcurve:starkbank-ecdsa Maven
  • Critical 9.8
    CVE-2021-43571

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

    starkbank-ecdsa npm
  • Critical 9.8
    CVE-2021-43572

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or ecdsa-python) before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

    starkbank-ecdsa PyPI
  • Critical 9.8
    CVE-2021-43569

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

    starkbank-ecdsa NuGet
  • Critical 9.9
    CVE-2021-40358

    A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 U…

    Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT
  • Critical 9.8
    CVE-2021-43466

    Template injection in thymeleaf-spring5

    In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.

    org.thymeleaf:thymeleaf-spring5 Maven