Ncipher
11 CVEs across 15 Ncipher products. Browse Ncipher vulnerabilities, severities, and proof-of-concept exploits.
Ncipher products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-1117 | | 2006-03-09 | nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source M… | |
CVE-2006-1116 | | 2006-03-09 | The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a… | |
CVE-2006-1115 | | 2006-03-09 | nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameter… | |
CVE-2004-0320 | | 2004-11-23 | Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time mem… | |
CVE-2004-0063 | | 2004-02-17 | The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code… | |
CVE-2003-1417 | | 2003-12-31 | nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allow local users to g… | |
CVE-2002-0941 | | 2002-10-04 | The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphra… | |
CVE-2002-0940 | | 2002-10-04 | domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does not generate the Op… | |
CVE-2002-0939 | | 2002-10-04 | The Install Wizard for nCipher MSCAPI CSP 5.50 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Car… | |
CVE-2002-1446 | | 2002-08-01 | The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status… | |
CVE-2001-0081 | | 2001-02-12 | swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to ga… |