220 matches found
DEBIAN-CVE-2020-10729
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords a...
The vulnerability of the ISN generator implementation in MPLAB Net protocols allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ISN generator implementation in MPLAB Net protocols is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability in the implementation of the ISN generator for the TI-NDKTCPIP protocol allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ISN generator implementation in the TI-NDKTCPIP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
PT-2021-2230 · Fnet · Fnet
Name of the Vulnerable Software and Affected Versions: FNET version 4.6.3 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the FNET protocol stack implementation. This could allow a remote attacker to gain unauthorized access to protected...
PT-2021-2223 · Unknown · Ethernut Nut/Os
Name of the Vulnerable Software and Affected Versions: Ethernut Nut/OS version 5.1 Description: An issue was discovered in the code that generates Initial Sequence Numbers ISNs for TCP connections, deriving the ISN from an insufficiently random source. This allows an attacker to determine the ISN...
CVE-2020-7548
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...
Multiple Schneider Electric Product Security Feature Issue Vulnerabilities
Schneider Electric Acti9 Smartlink SI D is a smart interface unit that realizes data communication between Acti9 electrical devices and Modbus devices. Schneider Electric Acti9 Smartlink SI D is an intelligent interface unit that enables data communication between Acti9 electrical devices and...
PT-2020-6904 · Unknown +1 · React Native Bluetooth Scan +1
Name of the Vulnerable Software and Affected Versions: Bluezone version 1.0.0 Description: The issue is related to the use of insufficiently random values in the React Native Bluetooth Scan component of the Bluezone application. This could allow a remote attacker to interfere with COVID-19 contac...
CVE-2015-8851
node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...
CVE-2018-19441
The CVE-2018-19441 issue affects Neato Botvac Connected 2.2.0. The GenerateRobotPassword function in the NeatoCrypto library uses insufficiently random numbers for robot secret_key values used in local and cloud authentication/authorization. Entropy depends solely on the robot’s serial number (pr...
CVE-2019-5232
There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak...
CVE-2019-14806
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id...
CVE-2019-14806
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id...
Design/Logic Flaw
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id...
CVE-2019-14806
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id...
GHSA-8Q89-PWHH-7WFQ Use of Insufficiently Random Values in penggle:kaptcha
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...
ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities EMC Identifier: ESA-2014-180 CVE Identifier: CVE-2014-4635, CVE-2014-4636, CVE-2014-4637, CVE-2014-4638, CVE-2014-4639 Severity Rating: See below for individual scores for each...
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness
Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness """ For testing purposes only. c Yong Chuan, Koh 2014 """ from time import sleep from socket import from struct import from random import import sys, os, argparse HOST = None PORT = 623 bufsize = 1024 recv = "" create socket UDPsock =...
CVE-2013-1900
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."...