1737 matches found
CVE-2019-8113
Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmation code for customer registration...
PT-2019-18889
Name of the Vulnerable Software and Affected Versions Magento versions 2.2 prior to 2.2.10 Magento versions 2.3 prior to 2.3.3 Magento version 2.3.2-p1 Description The issue concerns the use of a cryptographically weak random number generator. This weakness can be exploited to brute-force the...
CVE-2013-4102
Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...
Code injection
Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...
CVE-2013-4102
Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...
CVE-2013-4102
CVE-2013-4102 affects Cryptocat prior to 2.0.22 due to a weakness in strophe.js Math.random() RNG. Public sources in the provided documents describe it as a randomness weakness that can impact confidentiality and integrity (per NVD CVSSv2 6.4, CVSSv3.1 9.1). Connected records repeatedly reference...
PT-2019-6922
Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.22 Description The issue concerns a weakness in the random number generator, specifically with the use of Math.random in the strophe.js component. Recommendations For versions prior to 2.0.22, update to version...
CVE-2013-4102: Use of Insufficiently Random Values
Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...
CVE-2012-6124
A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...
DEBIAN-CVE-2012-6124
A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...
Code injection
A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...
CVE-2012-6124
A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...
CVE-2012-6124
A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...
CVE-2012-6124
CVE-2012-6124 concerns Chicken before 4.8.0 on 64‑bit platforms, where a casting error in the random number generator causes it to return a constant value. The vendor notes that this function isn’t used for security purposes. Connected sources (PT-2019-6812/6811) indicate the fix is to upgrade to...
CVE-2012-6124
A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes and is advertised as being unsuitable."...
A Broken Random Number Generator in AMD Microcode
Interesting story. I always recommend using a random number generator like Fortuna, even if you're using a hardware random source. It's just safer...
Unspecified Vulnerability in Fortinet FortiOS
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...
openSUSE Security Update : gcc7 (openSUSE-2019-2365)
This update for gcc7 to r275405 fixes the following issues : Security issues fixed : - CVE-2019-14250: Fixed an integer overflow in binutils bsc1142649. - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator bsc1149145...
openSUSE: Security Advisory for gcc7 (openSUSE-SU-2019:2365-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2019:2365-1 Security update for gcc7
This update for gcc7 to r275405 fixes the following issues: Security issues fixed: - CVE-2019-14250: Fixed an integer overflow in binutils bsc1142649. - CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator bsc1149145...