indutny records
6 published records for vendor indutny.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-347 Improper Verification of Cryptographic Signature3
- CWE-130 Improper Handling of Length Parameter Inconsistency1
- CWE-190 Integer Overflow or Wraparound1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2024-48949No exploit | The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) ||indutny · elliptic · CWE-347 | Critical9.1 | — | 0.4% | Oct 9, 2024 |
31Monitor | CVE-2020-13822No exploit | The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflindutny · elliptic · CWE-190 | High7.7 | — | 2.7% | Jun 4, 2020 |
27Monitor | CVE-2020-28498No exploit | Cryptographic Issuesindutny · elliptic · CWE-327 | Medium6.8 | — | 1.2% | Feb 2, 2021 |
21Monitor | CVE-2024-42460No exploit | In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit indutny · elliptic · CWE-130 | Medium5.3 | — | 0.4% | Aug 2, 2024 |
21Monitor | CVE-2024-42459No exploit | In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zindutny · elliptic · CWE-347 | Medium5.3 | — | 0.3% | Aug 2, 2024 |
19Monitor | CVE-2024-48948No exploit | The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at indutny · elliptic · CWE-347 | Medium4.8 | — | 0.5% | Oct 15, 2024 |
- CVE-2024-4894936Monitor
The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) ||
CriticalCVSS 9.1No exploitEPSS 0%indutny · ellipticOct 9, 2024
- CVE-2020-1382231Monitor
The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overfl
HighCVSS 7.7No exploitEPSS 2%indutny · ellipticJun 4, 2020
- CVE-2020-2849827Monitor
Cryptographic Issues
MediumCVSS 6.8No exploitEPSS 1%indutny · ellipticFeb 2, 2021
- CVE-2024-4246021Monitor
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit
MediumCVSS 5.3No exploitEPSS 0%indutny · ellipticAug 2, 2024
- CVE-2024-4245921Monitor
In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus z
MediumCVSS 5.3No exploitEPSS 0%indutny · ellipticAug 2, 2024
- CVE-2024-4894819Monitor
The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at
MediumCVSS 4.8No exploitEPSS 0%indutny · ellipticOct 15, 2024