Lucene search
+L

546 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•5 views

CVE-2020-27635: Use of Insufficiently Random Values

In PicoTCP 1.7.0, TCP ISNs are improperly random...

9.1CVSS7AI score0.00871EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•1 views

CVE-2020-27213: Use of Insufficiently Random Values

An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...

7.5CVSS6.8AI score0.00973EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•4 views

CVE-2020-27631: Use of Insufficiently Random Values

In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...

9.8CVSS7.1AI score0.01083EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•7 views

CVE-2020-27636: Use of Insufficiently Random Values

In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random...

9.1CVSS7AI score0.00871EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•1 views

CVE-2020-27630: Use of Insufficiently Random Values

In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random...

9.8CVSS7.1AI score0.01083EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/09/21 12:00 a.m.•14 views

The vulnerability of Intel Quartus Prime Pro automated design systems for Linux, related to the use of insufficiently random values, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel Quartus Prime Pro, a automated design system for Linux, is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00185EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/09/21 12:00 a.m.•28 views

Siemens LOGO! CMR and SIMATIC RTU 3000 Use of Insufficiently Random Values (CVE-2021-37186)

A vulnerability has been identified in LOGO! CMR2020 All versions V2.2, LOGO! CMR2040 All versions V2.2, SIMATIC RTU3010C All versions V4.0.9, SIMATIC RTU3030C All versions V4.0.9, SIMATIC RTU3031C All versions V4.0.9, SIMATIC RTU3041C All versions V4.0.9. The underlying TCP/IP stack does not...

5.4CVSS6.2AI score0.00356EPSS
SaveExploits0References3
Veracode
Veracode
•added 2023/09/13 5:47 a.m.•21 views

Use Of Insufficiently Random Values

Magento LTS is vulnerable to Use of Insufficiently Random Values. The vulnerability is caused by not generating sufficient length protectcode value as part of guest order cookie - guest-view and not implementing a rate limiting in the end point e.g: /magento19/index.php/default/sales/guest/view/...

7.5CVSS6.4AI score0.01252EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/12 12:00 a.m.•1 views

CVE-2023-29332: Use of Insufficiently Random Values

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...

9.8CVSS7.9AI score0.02676EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•34 views

Oracle Linux 9 : samba (ELSA-2023-2519)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2519 advisory. - resolves: rhbz2154373 - Fix CVE-2022-38023 - Fix CVE-2022-1615 GnuTLS gnutlsrnd can fail and give predictable random values - resolves: rhbz2108332 - Fix...

9CVSS7.4AI score0.73589EPSS
SaveExploits3References2
NVD
NVD
•added 2023/09/02 1:15 p.m.•20 views

CVE-2023-39979

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

9.8CVSS9.4AI score0.00982EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/02 1:15 p.m.•19 views

Authentication flaw

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

7.5CVSS9.3AI score0.00982EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/02 12:00 a.m.•4 views

CVE-2023-39979: Small Space of Random Values

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

9.8CVSS8.1AI score0.00982EPSS
SaveExploits0References3
ICS
ICS
•added 2023/08/22 6:00 a.m.•90 views

Hitachi Energy AFF66x

1. EXECUTIVE SUMMARY ​CVSS v3 9.6 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Hitachi Energy ​Equipment: AFF66x ​Vulnerabilities: Cross-site Scripting, Use of Insufficiently Random Values, Origin Validation Error, Integer Overflow or Wraparound, Uncontrolled Resource...

9.6CVSS6.5AI score0.98745EPSS
SaveExploits7References8
OSV
OSV
•added 2023/08/15 1:15 p.m.•16 views

CVE-2023-24478

Use of insufficiently random values for some Intel AgilexR software included as part of IntelR QuartusR Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.8AI score0.00185EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/15 1:15 p.m.•28 views

Information disclosure

Use of insufficiently random values for some Intel AgilexR software included as part of IntelR QuartusR Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access...

1.7CVSS5.2AI score0.00185EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/15 12:42 p.m.•19 views

CVE-2023-24478

Use of insufficiently random values for some Intel AgilexR software included as part of IntelR QuartusR Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6.3AI score0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/15 12:42 p.m.•45 views

CVE-2023-24478

Use of insufficiently random values for some Intel AgilexR software included as part of IntelR QuartusR Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.5AI score0.00185EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/15 12:00 a.m.•5 views

CVE-2023-24478: Use of Insufficiently Random Values

Use of insufficiently random values for some Intel AgilexR software included as part of IntelR QuartusR Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6AI score0.00185EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/08/03 12:00 a.m.•24 views

Siemens SCALANCE X-200RNA Switch Devices Use of Insufficiently Random Values (CVE-2022-46353)

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. The webserver of affected device...

9.8CVSS8.2AI score0.01029EPSS
SaveExploits0References3
Rows per page
Query Builder