Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The last four digits of the number are not validated. Remediation Upgrade personnummer to version 3.0.1 or higher. References - GitHub Additional Information - GitHub Advisory - GitHub Commit - GitHub Commit...

PT-2020-21503

Name of the Vulnerable Software and Affected Versions Personnummer versions prior to 3.0.2 Personnummer versions prior to 3.0.1 Personnummer versions prior to 3.0.3 Personnummer versions prior to 3.0.0 Personnummer versions prior to 3.3.0 Personnummer versions prior to 3.1.0 Personnummer versions...

PT-2020-21469

Name of the Vulnerable Software and Affected Versions Personnummer versions prior to 3.0.2 Personnummer versions prior to 3.0.1 Personnummer versions prior to 3.0.3 Personnummer versions prior to 3.0.0 Personnummer versions prior to 3.3.0 Personnummer versions prior to 3.1.0 Personnummer versions...

PT-2020-21527

Name of the Vulnerable Software and Affected Versions Personnummer versions prior to 3.0.2 Personnummer versions prior to 3.0.1 Personnummer versions prior to 3.0.3 Personnummer versions prior to 3.0.0 Personnummer versions prior to 3.3.0 Personnummer versions prior to 3.1.0 Personnummer versions...

CVE-2020-13776: Improper Privilege Management

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

DEBIAN-CVE-2019-9209

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values...

UBUNTU-CVE-2019-9209

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values...

CVE-2018-0673

creationtimestamp| type| source ---|---|--- 2018-11-15 18:22:38+00:00| seen| https://t.me/cibsecurity/1237...

Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

GHSA-F94M-MQHR-MC29 Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

CVE-2018-18853

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

CVE-2018-18853

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

PT-2018-9474 · Hapi +1 · @Hapi/Cryptiles +1

Name of the Vulnerable Software and Affected Versions: Eran Hammer cryptiles versions 4.1.1 and earlier Description: The issue is related to insufficient entropy in the randomDigits method, which can result in an increased likelihood of brute force attacks. This attack appears to be exploitable...

Junos OS: Short MacSec keys may allow man-in-the-middle attacks.

If all 64 digits of the connectivity association name CKN key or all 32 digits of the connectivity association key CAK key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an...

CVE-2018-7194

Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service preventing the creation of new tickets via a large number of digits in the ticket number format setting...

The First Step-by-Step Guide for Implementing Neural Architecture Search with Reinforcement…

The First Step-by-Step Guide for Implementing Neural Architecture Search with Reinforcement Learning Using TensorFlow Our team is no stranger to various flavors of AI including deep learning DL. That’s why we’ve immediately noticed when Google came out with AutoML project, designed to make AI bui...

USN-3434-1 libidn vulnerability

It was discovered that Libidn incorrectly handled decoding certain digits. A remote attacker could use this issue to cause Libidn to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2016-5056

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK...

CVE-2016-5056: Inadequate Encryption Strength

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK...

Design flaws at fast breakfast app login

Fast Breakfast APP is a mobile service software. There is a design vulnerability in the login of Fast Breakfast App, which uses a timestamp to verify whether a user is logged in, and takes the MD5 value of the first 10 digits of the timestamp to mark whether the user is logged in or not; and ther...