Lucene search
+L

1737 matches found

CNVD
CNVD
•added 2022/10/13 12:00 a.m.•68 views

SAP Customer Data Cloud Security Feature Issue Vulnerability

SAP Customer Data Cloud is a tool from SAP Germany that provides digital customer identity and access management. It enables companies to collect, aggregate and manage customer data across multiple touch points and applications. A security feature issue vulnerability exists in SAP Customer Data...

5.2CVSS5AI score0.00408EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/11 9:15 p.m.•30 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.2CVSS0.00408EPSS
SaveExploits0References2
OSV
OSV
•added 2022/10/11 9:15 p.m.•22 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.2CVSS5.8AI score0.00408EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/11 9:15 p.m.•23 views

Information disclosure

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

3.6CVSS5AI score0.00408EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•6 views

PT-2022-6162

Name of the Vulnerable Software and Affected Versions SAP Customer Data Cloud Gigya mobile app for Android version 7.4 Description The issue is related to the use of an insecure random number generator program, which makes it easy for an attacker to predict future random numbers. This can lead to...

5.6CVSS0.00408EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2022/10/11 12:00 a.m.•15 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.1AI score0.00408EPSS
SaveExploits0References2
CVE
CVE
•added 2022/10/11 12:00 a.m.•76 views

CVE-2022-41210

CVE-2022-41210 affects SAP Customer Data Cloud (Gigya mobile app for Android) version 7.4. The issue is caused by an insecure random number generator, making it easy to predict future random numbers and enabling information disclosure and modification of certain user settings. Sources across mult...

5.2CVSS5AI score0.00408EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•45 views

CVE-2022-41210

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...

5.3AI score0.00408EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/09/20 8:45 p.m.•49 views

Fastly Compute@Edge JS Runtime has fixed random number seed during compilation

Impact Math.random and crypto.getRandomValues methods failed to use sufficiently random values. The initial value to seed the CSPRNG cryptographically secure pseudorandom number generator was baked-in to the final WebAssembly module meaning the sequence of numbers generated was predictable for th...

7.5CVSS7.1AI score0.00922EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/09/20 8:45 p.m.•29 views

GHSA-CMR8-5W4C-44V8 Fastly Compute@Edge JS Runtime has fixed random number seed during compilation

Impact Math.random and crypto.getRandomValues methods failed to use sufficiently random values. The initial value to seed the CSPRNG cryptographically secure pseudorandom number generator was baked-in to the final WebAssembly module meaning the sequence of numbers generated was predictable for th...

7.5CVSS7.3AI score0.00922EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/09/20 7:50 p.m.•12 views

CVE-2022-39218 Random number seed fixed during compilation

The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK. In versions prior to 0.5.3, the Math.random and crypto.getRandomValues methods fail to use sufficiently random values. The initial value to seed...

7.5CVSS7.5AI score0.00922EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/20 7:50 p.m.•102 views

CVE-2022-39218

The CVE-2022-39218 vulnerability affects Fastly’s Compute@Edge JS Runtime. In versions before 0.5.3, Math.random and crypto.getRandomValues do not use sufficiently random values because the seed for the PRNG was baked into the final WebAssembly module, making the random sequence predictable for t...

7.5CVSS7.5AI score0.00922EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/20 12:00 a.m.•15 views

PT-2022-24817 · Unknown · Js Compute Runtime

Name of the Vulnerable Software and Affected Versions: JS Compute Runtime versions prior to 0.5.3 Description: The Math.random and crypto.getRandomValues methods fail to use sufficiently random values, making the sequence of random values predictable. An attacker can use the fixed seed to predict...

7.5CVSS7.5AI score0.00922EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2022/09/18 5:15 p.m.•11 views

CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

7.5CVSS5.8AI score0.01492EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/09/18 12:00 a.m.•25 views

PT-2022-25527

Name of the Vulnerable Software and Affected Versions profanity versions 1.60 and earlier Description The issue allows attackers to recover private keys from Ethereum vanity addresses and steal cryptocurrency due to only four billion possible RNG initializations. This has been exploited in the...

7.5CVSS7AI score0.01492EPSS
SaveExploits0References8
VulnCheck KEV
VulnCheck KEV
•added 2022/09/18 12:00 a.m.•18 views

VulnCheck KEV: CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

7.5CVSS7.1AI score0.01492EPSS
SaveIn wildExploits0References2
CNNVD
CNNVD
•added 2022/09/18 12:00 a.m.•26 views

profanity 安全特征问题漏洞

profanity is an ethereum vanity address generator from BlackTrace Personal Developers. A security vulnerability exists in profanity versions 1.60 and earlier, which stems from the fact that it has only 4 billion possible RNG initializations leading to an attacker being able to recover private key...

7.5CVSS7.2AI score0.01492EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/16 12:00 a.m.•19 views

WordPress plugin Craw Data 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

4.3CVSS5.2AI score0.00681EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2022/09/15 12:00 a.m.•23 views

SUSE: Security Advisory (SUSE-SU-2022:3270-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.0052EPSS
SaveExploits1References5
OSV
OSV
•added 2022/09/14 4:26 a.m.•9 views

SUSE-SU-2022:3270-1 Security update for samba

This update for samba fixes the following issues: - CVE-2022-1615: Fixed error handling in random number generation bso15103bsc1202976. Bugfixes: - Fixed use after free when iterating smbdserverconnection-connections after tree disconnect failure bso15128bsc1200102...

5.5CVSS5.8AI score0.0052EPSS
SaveExploits1References4
Rows per page
Query Builder