Lucene search
+L

1737 matches found

Cvelist
Cvelist
•added 2019/11/05 10:20 p.m.•39 views

CVE-2019-8113

Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmation code for customer registration...

5.8AI score0.0092EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/11/05 12:00 a.m.•3 views

PT-2019-18889

Name of the Vulnerable Software and Affected Versions Magento versions 2.2 prior to 2.2.10 Magento versions 2.3 prior to 2.3.3 Magento version 2.3.2-p1 Description The issue concerns the use of a cryptographically weak random number generator. This weakness can be exploited to brute-force the...

5.3CVSS0.0092EPSS
SaveExploits0References8
NVD
NVD
•added 2019/11/04 3:15 p.m.•29 views

CVE-2013-4102

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

9.1CVSS9.3AI score0.0197EPSS
SaveExploits0References4
Prion
Prion
•added 2019/11/04 3:15 p.m.•25 views

Code injection

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

6.4CVSS7.1AI score0.0197EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2019/11/04 2:45 p.m.•31 views

CVE-2013-4102

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

9.3AI score0.0197EPSS
SaveExploits0References4
CVE
CVE
•added 2019/11/04 2:45 p.m.•56 views

CVE-2013-4102

CVE-2013-4102 affects Cryptocat prior to 2.0.22 due to a weakness in strophe.js Math.random() RNG. Public sources in the provided documents describe it as a randomness weakness that can impact confidentiality and integrity (per NVD CVSSv2 6.4, CVSSv3.1 9.1). Connected records repeatedly reference...

9.1CVSS9.1AI score0.0197EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2019/11/04 12:00 a.m.•3 views

PT-2019-6922

Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.22 Description The issue concerns a weakness in the random number generator, specifically with the use of Math.random in the strophe.js component. Recommendations For versions prior to 2.0.22, update to version...

9.1CVSS0.0197EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/04 12:00 a.m.•5 views

CVE-2013-4102: Use of Insufficiently Random Values

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

9.1CVSS8.2AI score0.0197EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/31 9:15 p.m.•19 views

CVE-2012-6124

A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...

5.3CVSS6.8AI score
SaveExploits0References8
OSV
OSV
•added 2019/10/31 9:15 p.m.•20 views

DEBIAN-CVE-2012-6124

A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...

5.3CVSS6.8AI score0.0126EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/31 9:15 p.m.•24 views

Code injection

A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...

5CVSS7AI score0.0126EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2019/10/31 8:38 p.m.•4 views

CVE-2012-6124

A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...

6.9CVSS0.0126EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2019/10/31 8:38 p.m.•60 views

CVE-2012-6124

A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...

5.3CVSS5.2AI score0.0126EPSS
SaveExploits0
CVE
CVE
•added 2019/10/31 8:38 p.m.•106 views

CVE-2012-6124

CVE-2012-6124 concerns Chicken before 4.8.0 on 64‑bit platforms, where a casting error in the random number generator causes it to return a constant value. The vendor notes that this function isn’t used for security purposes. Connected sources (PT-2019-6812/6811) indicate the fix is to upgrade to...

5.3CVSS5.2AI score0.0126EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2019/10/31 8:38 p.m.•39 views

CVE-2012-6124

A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...

5.3AI score0.0126EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
•added 2019/10/31 11:24 a.m.•45 views

A Broken Random Number Generator in AMD Microcode

Interesting story. I always recommend using a random number generator like Fortuna, even if you're using a hardware random source. It's just safer...

1.3AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/23 12:00 a.m.•22 views

Unspecified Vulnerability in Fortinet FortiOS

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

7.5CVSS6.6AI score0.00996EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/10/23 12:00 a.m.•39 views

openSUSE Security Update : gcc7 (openSUSE-2019-2365)

This update for gcc7 to r275405 fixes the following issues : Security issues fixed : - CVE-2019-14250: Fixed an integer overflow in binutils bsc1142649. - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator bsc1149145...

7.5CVSS6.3AI score0.03181EPSS
SaveExploits1References8
OpenVAS
OpenVAS
•added 2019/10/23 12:00 a.m.•65 views

openSUSE: Security Advisory for gcc7 (openSUSE-SU-2019:2365-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7AI score0.03181EPSS
SaveExploits1References2
OSV
OSV
•added 2019/10/22 4:20 p.m.•8 views

OPENSUSE-SU-2019:2365-1 Security update for gcc7

This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils bsc1142649. - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator bsc1149145...

7.5CVSS6.7AI score0.03181EPSS
SaveExploits1References8
Rows per page
Query Builder