579 matches found
openSUSE Security Update : rclone (openSUSE-2020-2008)
This update for rclone fixes the following issues : rclone was updated to version 1.53.3 : - Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...
CVE-2019-19794
The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries...
DEBIAN-CVE-2020-25576
An issue was discovered in the randcore crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints...
Debian DLA-2318-1 : wpa security update
The following CVEs have been reported against src:wpa. CVE-2019-10064 hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjuncti...
Exploit for Improper Authentication in Citrix Application_Delivery_Controller_Firmware
citrixadcnetscalerlfiscan !alt textcitrix This Metas...
CVE-2020-11035
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6...
CVE-2020-11035
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6...
CVE-2020-11035: Use of a Broken or Risky Cryptographic Algorithm
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6...
PT-2020-12503
Name of the Vulnerable Software and Affected Versions GLPI versions 0.83.3 through 9.4.5 Description The issue concerns the generation of CSRF tokens using an insecure algorithm, which utilizes rand, uniqid, and MD5. This does not provide secure values. The problem is fixed in version 9.4.6...
ingersollrand.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1135879 Security Researcher ELProfesor Helped patch 2791 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ingersollrand.com...
CVE-2020-10560
An issue was discovered in Open Source Social Network OSSN through 5.3. A user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the...
Design/Logic Flaw
An issue was discovered in Open Source Social Network OSSN through 5.3. A user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the...
CVE-2020-10560
An issue was discovered in Open Source Social Network OSSN through 5.3. A user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the...
CVE-2020-10560
An issue was discovered in Open Source Social Network OSSN through 5.3. A user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the...
CVE-2020-10560: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
An issue was discovered in Open Source Social Network OSSN through 5.3. A user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the...
PT-2020-12202
Name of the Vulnerable Software and Affected Versions Open Source Social Network OSSN versions through 5.3 Description An issue was discovered in Open Source Social Network OSSN where a user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of t...
Design/Logic Flaw
In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers SEC-525...
CVE-2019-20494
In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers SEC-525...
CVE-2019-20494
In cPanel before 82.0.18, the RNG function Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525). Affected product: cPanel (web hosting control panel). Vulnerable component: Cpanel::Rand::Get. Root cause: RNG predictability leads to low-entropy sequences. Impact: potential infor...