Design/Logic Flaw

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...

CVE-2021-37553

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...

CVE-2021-37553

The CVE-2021-37553 affects JetBrains YouTrack (before version 2021.2.16363). The underlying issue is the use of an insecure PRNG in YouTrack’s security features, as documented across multiple sources (Red Hat, NVD, CNVD) and JetBrains’ Q2-2021 Security Bulletin, which notes the flaw and that it w...

PT-2021-21713

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2021.2.16363 Description The issue is related to the use of an insecure pseudorandom number generator PRNG in JetBrains YouTrack. This can potentially lead to predictable and exploitable outcomes...

CVE-2021-37553: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...

JetBrains Security Bulletin Q2 2021

JetBrains News Security JetBrains Security Bulletin Q2 2021 Robert Demmer In the second quarter of 2021, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description |...

CVE-2021-3678

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3678

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

Code injection

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3678 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3678

CVE-2021-3678 affects the showdoc project (star7th/showdoc) with a cryptographically weak PRNG. Connected sources (GHSA, Red Hat, OSV, CVE lists) consistently describe usage of insecure randomness (e.g., MD5-based/low-entropy paths, time/rand reliance) as the root cause. Impact details in the ref...

CVE-2021-3678

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3678: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

PT-2021-21351

Name of the Vulnerable Software and Affected Versions showdoc affected versions not specified Description The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG. This means that the random numbers generated by the system may not be sufficiently random,...

in postfixadmin/postfixadmin

✍️ Description uniqid is used as input to MD5 when generating a PFATOKEN I'll refer to this as a session token - the function uniqid is not a CSPRNG but rather is a PRNG meaning that it cannot generate cryptographically reliable/secure values. 🕵️‍♂️ Proof of Concept Execute the below code: PHP "; ?...

CVE-2021-34430: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic...

FortiMail - Insecure PRNG in password and token generation scheme of IBE authentication

A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of FortiMail Identity Based Encryption service may allow an unauthenticated attacker to infer parts of users authentication tokens and reset their credentials...

Vulnerability in the Kaspersky Password Manager

A vulnerability just patched in the random number generator used in the Kaspersky Password Manager resulted in easily guessable passwords: The password generator included in Kaspersky Password Manager had several problems. The most critical one is that it used a PRNG not suited for cryptographic...

PT-2021-6275

Name of the Vulnerable Software and Affected Versions FortiPortal versions prior to 6.0.6 Description The issue is related to the use of a cryptographically weak pseudo-random number generator in the password reset feature, which may allow a remote unauthenticated attacker to predict parts of or...

Advisory ROSA-SA-2021-1978

Software: stunnel 4.56 OS: Cobalt 7.9 CVE-ID: CVE-2014-0016 CVE-Crit: MEDIUM CVE-DESC: stunnel before 5.00 when using fork streaming does not properly update the OpenSSL pseudo-random number generator PRNG state, which causes subsequent children with the same process ID to use the same entropy po...