kjur kayıtları
kjur üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-347 Improper Verification of Cryptographic Signature4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-325 Missing Cryptographic Step1
- CWE-369 Divide By Zero1
- CWE-681 Incorrect Conversion between Numeric Types1
- CWE-1023 Incomplete Comparison with Missing Factors1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-14968İstismar yok | An issue was discovered in the jsrsasign package before 8.0.17 for Node.js.kjur · jsrsasign · CWE-119 | Kritik9,8 | — | %2,8 | 22 Haz 2020 |
40Planlayın | CVE-2020-14967İstismar yok | An issue was discovered in the jsrsasign package before 8.0.18 for Node.js.kjur · jsrsasign · CWE-119 | Kritik9,8 | — | %2,2 | 22 Haz 2020 |
39İzleyin | CVE-2022-25898İstismar yok | Improper Verification of Cryptographic Signaturekjur · jsrsasign · CWE-347 | Kritik9,8 | — | %1,1 | 1 Tem 2022 |
37İzleyin | CVE-2026-4599İstismar yok | Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandokjur · jsrsasign · CWE-1023 | Kritik9,3 | — | %0,4 | 23 Mar 2026 |
36İzleyin | CVE-2021-30246İstismar yok | In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid.kjur · jsrsasign · CWE-347 | Kritik9,1 | — | %0,9 | 7 Nis 2021 |
35İzleyin | CVE-2026-4601İstismar yok | Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash prokjur · jsrsasign · CWE-325 | Yüksek8,8 | — | %0,3 | 23 Mar 2026 |
32İzleyin | CVE-2026-4600İstismar yok | Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-paramekjur · jsrsasign · CWE-347 | Yüksek8,1 | — | %0,3 | 23 Mar 2026 |
30İzleyin | CVE-2020-14966İstismar yok | An issue was discovered in the jsrsasign package through 8.0.18 for Node.js.kjur · jsrsasign · CWE-347 | Yüksek7,5 | — | %1,1 | 22 Haz 2020 |
30İzleyin | CVE-2026-4598İstismar yok | Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInkjur · jsrsasign · CWE-835 | Yüksek7,7 | — | %0,5 | 23 Mar 2026 |
30İzleyin | CVE-2026-4602İstismar yok | Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponekjur · jsrsasign · CWE-681 | Yüksek7,7 | — | %0,4 | 23 Mar 2026 |
23İzleyin | CVE-2024-21484İstismar yok | Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process.kjur · jsrsasign · CWE-203 | Orta5,9 | — | %0,9 | 22 Oca 2024 |
8İzleyin | CVE-2026-4603İstismar yok | Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.jkjur · jsrsasign · CWE-369 | Düşük2,0 | — | %0,1 | 23 Mar 2026 |
- CVE-2020-1496840Planlayın
An issue was discovered in the jsrsasign package before 8.0.17 for Node.js.
KritikCVSS 9,8İstismar yokEPSS %2kjur · jsrsasign22 Haz 2020
- CVE-2020-1496740Planlayın
An issue was discovered in the jsrsasign package before 8.0.18 for Node.js.
KritikCVSS 9,8İstismar yokEPSS %2kjur · jsrsasign22 Haz 2020
- CVE-2022-2589839İzleyin
Improper Verification of Cryptographic Signature
KritikCVSS 9,8İstismar yokEPSS %1kjur · jsrsasign1 Tem 2022
- CVE-2026-459937İzleyin
Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRando
KritikCVSS 9,3İstismar yokEPSS %0kjur · jsrsasign23 Mar 2026
- CVE-2021-3024636İzleyin
In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid.
KritikCVSS 9,1İstismar yokEPSS %0kjur · jsrsasign7 Nis 2021
- CVE-2026-460135İzleyin
Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash pro
YüksekCVSS 8,8İstismar yokEPSS %0kjur · jsrsasign23 Mar 2026
- CVE-2026-460032İzleyin
Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parame
YüksekCVSS 8,1İstismar yokEPSS %0kjur · jsrsasign23 Mar 2026
- CVE-2020-1496630İzleyin
An issue was discovered in the jsrsasign package through 8.0.18 for Node.js.
YüksekCVSS 7,5İstismar yokEPSS %1kjur · jsrsasign22 Haz 2020
- CVE-2026-459830İzleyin
Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigIn
YüksekCVSS 7,7İstismar yokEPSS %0kjur · jsrsasign23 Mar 2026
- CVE-2026-460230İzleyin
Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative expone
YüksekCVSS 7,7İstismar yokEPSS %0kjur · jsrsasign23 Mar 2026
- CVE-2024-2148423İzleyin
Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process.
OrtaCVSS 5,9İstismar yokEPSS %0kjur · jsrsasign22 Oca 2024
- CVE-2026-46038İzleyin
Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.j
DüşükCVSS 2,0İstismar yokEPSS %0kjur · jsrsasign23 Mar 2026