1197 matches found
Code injection
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3990
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3990
Technical details (affected versions, root cause specifics, and fixes) for CVE-2021-3990 are not publicly available in the provided connected documents. Monitor for updates from vendors and vulnerability databases.
CVE-2021-3990: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
PT-2021-22746
Name of the Vulnerable Software and Affected Versions showdoc affected versions not specified Description The issue concerns the use of a cryptographically weak pseudo-random number generator PRNG in showdoc. This weakness can potentially lead to predictable and insecure outcomes in applications...
CVE-2011-4574: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer the RDTSC instruction. This instruction can be virtualized, and some virtual machine hosts have chosen to disable this...
in zmister2016/mrdoc
description Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in Mrdoc allows an attacker to reset arbitrary user‘s password 1、/admin/sendemailvcode/，check email & generate email & send mail def sendemailvcoderequest: if request.method == 'POST': email = request.POST.get'email',No...
CVE-2021-41117: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...
More Detail on the Juniper Hack and the NSA PRNG Backdoor
We knew the basics of this story, but its good to have more detail. Heres me in 2015 about this Juniper hack. Heres me in 2007 on the NSA backdoor...
Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
GHSA-J85Q-WHC9-G4P9 Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
Revive Adserver: Use of a Broken or Risky Cryptographic Algorithm
revive-adserver utilizes a PRNG for session-token generation, this means that an attacker could theoretically be able to generate session tokens at random and take over accounts at random. This function does not generate cryptographically secure values, and should not be used for cryptographic...
Palo Alto Networks PAN-OS 8.1.x < 8.1.19 / 9.0.x < 9.0.14 / 9.1.x < 9.1.10 / 10.0.x < 10.0.4 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.19 or 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.10 or 10.0.x prior to 10.0.4. It is, therefore, affected by a vulnerability. - A cryptographically weak pseudo-random number generator PRNG is used during...
CVE-2021-3047
A cryptographically weak pseudo-random number generator PRNG is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to...
CVE-2021-3047
CVE-2021-3047 affects PAN-OS web interface authentication due to a cryptographically weak PRNG. Affected: PAN-OS 8.1.x < 8.1.19, 9.0.x < 9.0.14, 9.1.x < 9.1.10, 10.0.x
CVE-2021-3047 PAN-OS: Weak Cryptography Used in Web Interface Authentication
A cryptographically weak pseudo-random number generator PRNG is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to...
PAN-OS: Weak Cryptography Used in Web Interface Authentication
A cryptographically weak pseudo-random number generator PRNG is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to...
CVE-2021-3047: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
A cryptographically weak pseudo-random number generator PRNG is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to...
PT-2021-18743
Name of the Vulnerable Software and Affected Versions PAN-OS versions 8.1 through 8.1.18 PAN-OS versions 9.0 through 9.0.13 PAN-OS versions 9.1 through 9.1.9 PAN-OS versions 10.0 through 10.0.3 Description A cryptographically weak pseudo-random number generator PRNG is used during authentication ...