Lucene search
+L

263 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/24 12:00 a.m.•3 views

CVE-2020-6824: Session Fixation

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...

2.8CVSS5.5AI score0.00273EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2020/04/14 7:35 a.m.•37 views

CVE-2020-6824

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...

2.8CVSS2AI score0.00273EPSS
SaveExploits0References3
OSV
OSV
•added 2020/04/07 12:00 a.m.•15 views

UBUNTU-CVE-2020-6824

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...

2.8CVSS6.7AI score0.00273EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/03/24 12:00 a.m.•66 views

Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2020-1304)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00435EPSS
SaveExploits0References2
OSV
OSV
•added 2020/02/11 8:15 p.m.•7 views

CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

8.4CVSS7.2AI score
SaveExploits0References13
Prion
Prion
•added 2020/02/11 8:15 p.m.•28 views

Authentication flaw

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

2.1CVSS7.1AI score0.00558EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2020/02/11 7:03 p.m.•106 views

CVE-2013-2120

CVE-2013-2120 affects the KDE Paste Applet in kdeplasma-addons up to version prior to 4.10.5 . The vulnerability stems from the %{password(...)} macro in pastemacroexpander.cpp, which does not generate passwords securely, allowing context-dependent attackers to bypass authentication via a brute-f...

8.4CVSS8.8AI score0.00558EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2020/02/11 7:03 p.m.•178 views

CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

8.4CVSS9AI score0.00558EPSS
SaveExploits1
attackerkb
attackerkb
•added 2020/02/05 2:15 p.m.•7 views

CVE-2020-8631

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...

5.5CVSS6.2AI score0.00435EPSS
SaveExploits0References5
OSV
OSV
•added 2020/02/05 2:15 p.m.•11 views

UBUNTU-CVE-2020-8631

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...

5.5CVSS6.1AI score0.00435EPSS
SaveExploits0References3
Prion
Prion
•added 2020/02/05 2:15 p.m.•24 views

Design/Logic Flaw

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...

2.1CVSS5.4AI score0.00435EPSS
SaveExploits0References4Affected Software3
UbuntuCve
UbuntuCve
•added 2020/01/27 5:15 p.m.•45 views

CVE-2013-4441

The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...

9.8CVSS7.2AI score0.02024EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/12 12:00 a.m.•16 views

Fedora Update for makepasswd FEDORA-2020-1db19e75db

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01331EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/27 4:15 p.m.•8 views

CVE-2016-4980

A password generation weakness exists in xquest through 2016-06-13...

2.5CVSS5.8AI score0.00322EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2019/11/27 3:55 p.m.•42 views

CVE-2016-4980

A password generation weakness exists in xquest through 2016-06-13...

3.6AI score0.00322EPSS
SaveExploits0References4
CVE
CVE
•added 2019/11/27 3:55 p.m.•87 views

CVE-2016-4980

CVE-2016-4980 affects xquest prior to 2016-06-13, describing a password generation weakness. Multiple connected sources (NVD entry, EulerOS/RHEL advisories, Nessus open code, and PT Security) confirm the issue stems from the xguest/xquest password creation method and indicate the vulnerability ex...

2.5CVSS3.8AI score0.00322EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2019/11/27 12:00 a.m.•8 views

PT-2019-7829 · Xquest · Xquest

Name of the Vulnerable Software and Affected Versions: xquest versions prior to 2016-06-13 Description: A password generation weakness exists. Recommendations: For versions prior to 2016-06-13, at the moment, there is no information about a newer version that contains a fix for this issue...

2.5CVSS3.4AI score0.00322EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/27 12:00 a.m.•0 views

CVE-2016-4980: Use of Insufficiently Random Values

A password generation weakness exists in xquest through 2016-06-13...

2.5CVSS5.4AI score0.00322EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/29 7:15 p.m.•11 views

CVE-2011-4931

gpw generates shorter passwords than required...

7.5CVSS6.8AI score
SaveExploits0References7
NVD
NVD
•added 2019/06/17 3:15 p.m.•23 views

CVE-2018-10239

A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device and perform actions within the super user scope. The vulnerability is due to a...

7.2CVSS6.9AI score0.00379EPSS
SaveExploits0References1
Rows per page
Query Builder