Lucene search
K

77 matches found

EUVD
EUVD
added 2026/04/20 6:31 a.m.3 views

EUVD-2026-23752

SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via man-in-the-middle attack...

8.2CVSS5.7AI score0.00015EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/20 3:18 a.m.26 views

CVE-2026-32959

SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via man-in-the-middle attack...

8.2CVSS0.00015EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.2 views

PT-2026-33693

Name of the Vulnerable Software and Affected Versions SD-330AC affected versions not specified AMC Manager affected versions not specified Description SD-330AC and AMC Manager contain a stack-based buffer overflow in the redirect handler. This issue occurs during the processing of redirect URLs,...

8.8CVSS7.8AI score0.00055EPSS
Exploits0References8
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/23 10:54 a.m.8 views

Security Bulletin: A vulnerability in form-data affect IBM® Db2® Big SQL.

Summary A vulnerability in form-data affect IBM® Db2® Big SQL 8.2 on IBM Cloud Pak for Data 5.2 and earlier. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated...

9.4CVSS5.7AI score0.01319EPSS
Exploits1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 10:33 a.m.3 views

CVE-2017-18397

cPanel before 68.0.15 does not preserve permissions for local backup transport SEC-330...

3.3CVSS6.9AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:58 a.m.7 views

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

9.8CVSS7AI score0.00591EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.3 views

PT-2025-44330

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine VM or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data...

8.8CVSS5.9AI score0.00012EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-6394

Malware in sbrugna...

7.8CVSS6.4AI score0.01602EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/05/22 10:19 a.m.8 views

CVE-2019-6821

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum...

6.5CVSS6.9AI score0.00225EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/06 12:0 a.m.3 views

PT-2025-5827 · Honeywell · Honeywell Onewireless Wireless Device Manager

Name of the Vulnerable Software and Affected Versions: Honeywell OneWireless Wireless Device Manager WDM versions R310.x through R330.1 Description: The issue concerns a command injection vulnerability. An authenticated attacker could potentially exploit this vulnerability through the firmware...

9.4CVSS8AI score0.00273EPSS
Exploits0References5
ICS
ICS
added 2024/06/11 12:0 a.m.21 views

Siemens SIMATIC S7-200 SMART Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

8.8CVSS8.2AI score0.00214EPSS
Exploits0References12
NVD
NVD
added 2024/06/02 2:15 p.m.11 views

CVE-2024-36389

MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass...

9.8CVSS9.7AI score0.00093EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/02 1:21 p.m.16 views

CVE-2024-36389 MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values

MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass...

9.8CVSS7.1AI score0.00093EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/02 1:21 p.m.19 views

CVE-2024-36389 MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values

MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass...

9.8CVSS9.7AI score0.00093EPSS
Exploits0References1
Talos
Talos
added 2023/09/05 12:0 a.m.61 views

Open Automation Software OAS Platform OAS Engine authentication bypass vulnerability

Talos Vulnerability Report TALOS-2023-1776 Open Automation Software OAS Platform OAS Engine authentication bypass vulnerability September 5, 2023 CVE Number CVE-2023-34353 SUMMARY An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation...

7.5CVSS7.5AI score0.00051EPSS
Exploits1
CVE
CVE
added 2023/08/02 12:23 p.m.2490 views

CVE-2023-26451

CVE-2023-26451 concerns Open-Xchange AppSuite’s integrated oAuth Authorization Service, which used a weak randomness source to generate authorization tokens. This made authorization codes predictable to third parties, enabling interception of the client authorization process and potential account...

7.5CVSS7.5AI score0.00116EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2023/01/12 11:15 p.m.6 views

CVE-2023-22601

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values. They do not properly randomize MQTT ClientID parameters. An unauthorized user could calculate this...

10CVSS9.5AI score0.00209EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/01/12 10:34 p.m.10 views

CVE-2023-22601

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values. They do not properly randomize MQTT ClientID parameters. An unauthorized user could calculate this...

10CVSS9.5AI score0.00209EPSS
Exploits0References1
CVE
CVE
added 2023/01/12 10:34 p.m.56 views

CVE-2023-22601

CVE-2023-22601 affects InHand Networks InRouter302 (pre V3.5.56) and InRouter615 (pre InRouter6XX-S-V2.3.0.r5542). It is CWE-330: Use of Insufficiently Random Values due to improper randomization of MQTT ClientID parameters, enabling an unauthorized user to gather information about other devices ...

10CVSS8.4AI score0.00209EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-330-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.687EPSS
Exploits13References2
Rows per page
Query Builder