262 matches found
CVE-2020-6824: Session Fixation
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...
CVE-2020-6824
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...
UBUNTU-CVE-2020-6824
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2020-1304)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2120
The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...
Authentication flaw
The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...
CVE-2013-2120
CVE-2013-2120 affects the KDE Paste Applet in kdeplasma-addons up to version prior to 4.10.5 . The vulnerability stems from the %{password(...)} macro in pastemacroexpander.cpp, which does not generate passwords securely, allowing context-dependent attackers to bypass authentication via a brute-f...
CVE-2013-2120
The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...
UBUNTU-CVE-2020-8631
cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...
Design/Logic Flaw
cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...
CVE-2013-4441
The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...
Fedora Update for makepasswd FEDORA-2020-1db19e75db
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2016-4980
A password generation weakness exists in xquest through 2016-06-13...
CVE-2016-4980
A password generation weakness exists in xquest through 2016-06-13...
CVE-2016-4980
CVE-2016-4980 affects xquest prior to 2016-06-13, describing a password generation weakness. Multiple connected sources (NVD entry, EulerOS/RHEL advisories, Nessus open code, and PT Security) confirm the issue stems from the xguest/xquest password creation method and indicate the vulnerability ex...
PT-2019-7829 · Xquest · Xquest
Name of the Vulnerable Software and Affected Versions: xquest versions prior to 2016-06-13 Description: A password generation weakness exists. Recommendations: For versions prior to 2016-06-13, at the moment, there is no information about a newer version that contains a fix for this issue...
CVE-2016-4980: Use of Insufficiently Random Values
A password generation weakness exists in xquest through 2016-06-13...
CVE-2011-4931
gpw generates shorter passwords than required...
CVE-2018-10239
A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device and perform actions within the super user scope. The vulnerability is due to a...
CVE-2018-10239
A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device and perform actions within the super user scope. The vulnerability is due to a...