CVE-2013-2782: Undefined Security Weakness

Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key...

PT-2013-3925

Name of the Vulnerable Software and Affected Versions Schneider Electric Trio J-Series License Free Ethernet Radio versions 3.6.0 through 3.6.3 Description The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of the AES encryption key, which is t...

CVE-2013-4869

Cisco Unified Communications Manager CUCM 7.1x through 9.12 and the IM & Presence Service in Cisco Unified Presence Server through 9.12 use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat...

Hardcoded credentials

Cisco Unified Communications Manager CUCM 7.1x through 9.12 and the IM & Presence Service in Cisco Unified Presence Server through 9.12 use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat...

CVE-2013-4869: Insufficiently Protected Credentials

Cisco Unified Communications Manager CUCM 7.1x through 9.12 and the IM & Presence Service in Cisco Unified Presence Server through 9.12 use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat...

PT-2013-5246

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.12 Cisco Unified Presence Server versions 7.1x through 9.12 Description The software uses the same CTI and database-encryption key across different customers' installations, making i...

CVE-2013-2872

Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors...

Code injection

Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors...

CVE-2013-2872

Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors...

CVE-2013-2872

CVE-2013-2872 affects Google Chrome on Mac OS X prior to 28.0.1500.71. The issue is that the entropy source for renderer processes may be insufficient, potentially allowing remote attackers to bypass cryptographic protections in third‑party components via unspecified vectors. Impacts are describe...

CVE-2013-2872

Removed by vendor...

CVE-2013-2872: Undefined Security Weakness

Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors...

PT-2013-3993

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 28.0.1500.71 Description The issue is related to insufficient entropy for renderer processes, which could make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party...

UBUNTU-CVE-2012-6702

Expat, when used in a parser that has not called XMLSetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function...

CVE-2012-6702

Expat, when used in a parser that has not called XMLSetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function...

PT-2012-6297

Name of the Vulnerable Software and Affected Versions Expat affected versions not specified Description The issue makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms. This is achieved through vectors involving the use of the srand function, when Expat is...

CVE-2012-5860

Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the generation of non-compliant public keys...

Design/Logic Flaw

Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the generation of non-compliant public keys...

CVE-2012-5860

Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the generation of non-compliant public keys...

CVE-2012-5860

Technical details for CVE-2012-5860 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is present beyond the general description. Monitor for updates.