Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2022/05/19 12:00 a.m.•52 views

GHSA-GGFX-H9XJ-5V9C Insecure PRNG use in random_password_generator

The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...

7.5CVSS7.5AI score0.01903EPSS
SaveExploits1References7
NVD
NVD
•added 2022/05/18 11:15 a.m.•23 views

CVE-2019-25061

The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...

7.5CVSS0.01903EPSS
SaveExploits1References4
Snyk
Snyk
•added 2022/05/18 9:28 a.m.•10 views

Inadequate Encryption Strength

Overview randompasswordgenerator is a generates a random password with various useful options. Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the use of Kernelrand to generate passwords, which, as a result of its cyclic nature, can facilitate password...

7.5CVSS7AI score0.01903EPSS
SaveExploits1References2
Mend
Mend
•added 2022/05/18 5:49 a.m.•6 views

CVE-2019-25061

The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...

8.7CVSS0.01903EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2022/05/18 12:00 a.m.•7 views

PT-2022-8283

Name of the Vulnerable Software and Affected Versions random password generator gem versions through 1.0.0 Description The issue concerns the use of Kernelrand to generate passwords, which has a cyclic nature that can facilitate password prediction. This affects the random password generator gem...

7.5CVSS0.01903EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•8 views

CVE-2019-25061: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...

7.5CVSS7.3AI score0.01903EPSS
SaveExploits1References2
Veracode
Veracode
•added 2017/01/03 2:51 a.m.•18 views

Insecure Random Number Generator

net-http-digestauth is vulnerable to insecure random number generation. The library uses Kernelrand which is a repeatable sequence of numbers, allowing a malicious user to guess the number under certain circumstances...

6.7AI score
SaveExploits0
Rows per page
Query Builder