PT-2021-17743 · Netflix · Netflix Oss Hollow

Name of the Vulnerable Software and Affected Versions: Netflix OSS Hollow affected versions not specified Description: The issue allows an attacker to pre-create directories with wide permissions since the Files.existsparent check is performed before creating the directories. Furthermore, the use...

CVE-2021-22309

There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions...

Vulnerabilities fixed in NetBSD

The developers of NetBSD have fixed a number of vulnerabilities fixed in NetBSD's IP stack. Because packet IDs are not randomly are not randomly generated by default, a malicious party can predict the IP traffic. predict, allowing the malicious party to launch a man-in-the-middle attack to obtain...

The vulnerability of the implementation of the ISN generator for the CycloneTCP protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the CycloneTCP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the implementation of the ISN generator in the FNET protocol stack allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the FNET protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the ISN generator implementation in MPLAB Net protocols allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in MPLAB Net protocols is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability in the implementation of the ISN generator for the TI-NDKTCPIP protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the TI-NDKTCPIP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the implementation of the ISN generator of the protocol stack used in Contiki OS and uIP allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation used in the Contiki OS and uIP is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the implementation of the ISN generator for the PicoTCP protocol stack allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the PicoTCP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

PT-2021-2231 · Contiki · Contiki

Name of the Vulnerable Software and Affected Versions: Contiki version 4.5 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the Contiki OS uIP protocol stack implementation. This could allow a remote attacker to gain unauthorized access to...

PT-2021-2228 · Oryx · Cyclonetcp

Name of the Vulnerable Software and Affected Versions: Oryx CycloneTCP version 1.9.6 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the CycloneTCP stack implementation. This could allow a remote attacker to gain unauthorized access to protecte...

PT-2021-2230 · Fnet · Fnet

Name of the Vulnerable Software and Affected Versions: FNET version 4.6.3 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the FNET protocol stack implementation. This could allow a remote attacker to gain unauthorized access to protected...

PT-2021-2232 · Picotcp · Picotcp

Name of the Vulnerable Software and Affected Versions: PicoTCP version 1.7.0 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the PicoTCP stack implementation. This could potentially allow a remote attacker to gain unauthorized access to protect...

CVE-2021-23127 [20210301] - Core - Insecure randomness within 2FA secret generation

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes...

PT-2021-2223 · Unknown · Ethernut Nut/Os

Name of the Vulnerable Software and Affected Versions: Ethernut Nut/OS version 5.1 Description: An issue was discovered in the code that generates Initial Sequence Numbers ISNs for TCP connections, deriving the ISN from an insufficiently random source. This allows an attacker to determine the ISN...

The vulnerability of the implementation of the ISN generator in the protocols used by uC/OS and uC/TCP-IP allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the uC/OS and uC/TCP-IP protocols is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the ISN IP pool generator implementation used in NutOS and Nut/Net arises from the use of insufficiently random values, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the ISN IP pool generator implemented in NutOS and Nut/Net relates to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2021-23126

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand function within the process of generating the 2FA secret...

Open Source Matters Joomla 安全特征问题漏洞

Joomla is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source, cross-platform content management system CMS. Joomla suffers from a cryptographic issue vulnerability that stems from not using the secure rand function during the generation of 2FA keys. No...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a memory corruption vulnerability in versions prior to 0.2.3. The vulnerability stems from the program's implied randomness to arrays, so that uninitialized memory may be discarded in the event of an...