Lucene search
+L

346 matches found

The Hacker News
The Hacker News
added 2021/10/12 7:57 a.m.93 views

GitHub Revoked Insecure SSH Keys Generated by a Popular git Client

Code hosting platform GitHub has revoked weak SSH authentication keys that were generated via the GitKraken git GUI client due to a vulnerability in a third-party library that increased the likelihood of duplicated SSH keys. As an added precautionary measure, the Microsoft-owned company also said...

9.1CVSS0.1AI score0.03091EPSS
SaveExploits1
OSV
OSV
added 2021/09/02 5:07 p.m.46 views

GHSA-J85Q-WHC9-G4P9 Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

5.9CVSS5.7AI score0.01064EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/08/11 12:00 a.m.10 views

Palo Alto Networks PAN-OS 安全特征问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in the Palo Alto Networks PAN-OS web interface that stems from the affected product's use of a cryptographically weak pseudo-random number generator...

4.2CVSS5.2AI score0.00452EPSS
SaveExploits0References4
NVD
NVD
added 2021/08/04 2:15 p.m.28 views

CVE-2021-3678

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

7.5CVSS0.01064EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/08/04 2:15 p.m.7 views

CVE-2021-3678

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

7.5CVSS6.8AI score0.01064EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/08/04 12:00 a.m.7 views

showdoc 安全特征问题漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc in the security features problematic vulnerability , the vulnerability stems from the lack of a limit on the number of client logins and thus vulnerable to password weak pseudo-random number generator PRNG attack...

7.5CVSS6.5AI score0.01064EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/09 8:15 p.m.7 views

CVE-2021-0131

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

6.5CVSS5.8AI score0.0081EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/09 7:10 p.m.40 views

CVE-2021-0131

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

6.5AI score0.0081EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/09 12:00 a.m.11 views

Intel Security Library 安全特征问题漏洞

Intel Security Library is the Intel Security Library for data center applications from Intel Corporation. A security signature issue vulnerability exists in Intel Security Library versions prior to 3.3, which stems from the use of a cryptographically weak pseudo-random number generator PRNG in th...

6.5CVSS6.5AI score0.0081EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/01 1:15 p.m.44 views

CVE-2021-23020

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys...

5.5CVSS0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/05 1:15 p.m.26 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5.3CVSS0.00945EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/05 1:15 p.m.18 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5.3CVSS6.8AI score
SaveExploits0References2
Prion
Prion
added 2021/05/05 1:15 p.m.19 views

Design/Logic Flaw

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5CVSS5.3AI score0.00945EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/05/05 12:25 p.m.30 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

6.6AI score0.00945EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/29 4:15 a.m.8 views

CVE-2020-11616

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator PRNG algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information...

7.5CVSS7.1AI score0.01332EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/29 4:15 a.m.24 views

Information disclosure

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator PRNG algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information...

5CVSS7.6AI score0.01332EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/06/04 12:00 a.m.49 views

D-Link DIR-865L Security Feature Issue Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A security feature issue vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which stems from the pseudo-random number generator using an easily guessable seed. No details of the vulnerability are provided...

7.5CVSS7AI score0.01296EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/03 5:15 p.m.9 views

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

7.5CVSS7.1AI score0.01296EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/06/03 4:23 p.m.34 views

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

7.6AI score0.01296EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2020/05/08 12:00 a.m.12 views

PT-2020-19183 · Broadcom +1 · Broadcom Chips +3

Name of the Vulnerable Software and Affected Versions: Broadcom chips affected versions not specified Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset Description: The issue arises from the use of a low-entropy Pseudo Random Number Generator PRNG in situations where a Hardware...

6.5CVSS6.3AI score0.0073EPSS
SaveExploits2References11
Rows per page
Query Builder