Lucene search
K

1235 matches found

OSV
OSV
added 2023/10/10 5:15 p.m.1 views

CVE-2020-27636

In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random...

9.1CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2023/10/10 5:15 p.m.12 views

CVE-2020-27633

In FNET 4.6.3, TCP ISNs are improperly random...

9.1CVSS9.4AI score0.00185EPSS
Exploits0References3
OSV
OSV
added 2023/10/10 5:15 p.m.1 views

CVE-2020-27634

In Contiki 4.5, TCP ISNs are improperly random...

9.1CVSS5.8AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/10/10 12:0 a.m.16 views

CVE-2020-27635

In PicoTCP 1.7.0, TCP ISNs are improperly random...

7.2AI score0.00185EPSS
Exploits0References3
Snyk
Snyk
added 2023/09/18 1:48 p.m.6 views

Insecure Randomness

Amendment This was deemed not a vulnerability. Overview github.com/greenpau/caddy-security is a Security App and Plugin for Caddy v2. Affected versions of this package are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted...

9.8CVSS7.1AI score0.00126EPSS
Exploits0References2
Snyk
Snyk
added 2023/09/18 1:48 p.m.1 views

Insecure Randomness

Overview Affected versions of this package are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted via a brute-force search. Attackers could use the potentially predictable nonce value used for authentication purposes in th...

9.8CVSS7.2AI score0.00126EPSS
Exploits0References2
Snyk
Snyk
added 2023/09/18 1:48 p.m.1 views

Insecure Randomness

Overview Affected versions of this package are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted via a brute-force search. Attackers could use the potentially predictable nonce value used for authentication purposes in th...

9.8CVSS7.2AI score0.00126EPSS
Exploits0References2
Amazon
Amazon
added 2023/09/13 12:0 a.m.2 views

Important: php

Issue Overview: GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixed in 8.2.7, 8.1.20, 8.0.29 NOTE: https://github.com/php/php-src/security/advisories/GHSA-76gg-c692-v2mw NOTE:...

9.8CVSS7.1AI score0.29385EPSS
Exploits4
OSV
OSV
added 2023/09/02 1:15 p.m.2 views

CVE-2023-39979

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values...

9.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2023/09/02 12:0 a.m.2 views

MOXA MXsecurity Security Feature Issue Vulnerability

MOXA MXsecurity is a management platform from China-based MOXA. that provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MOXA MXsecurity...

9.8CVSS6.9AI score0.00294EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/09/01 12:0 a.m.4 views

PKP Web Application Library Security Vulnerability

The PKP Web Application Library is a library shared by PKP's Open Journal System OJS, Open Conference System OCS, Open Monograph Press OMP, Open Preprint System OPS, and Open Harvester System OHS. A security vulnerability exists in the PKP Web Application Library prior to version 3.3.0-16, which...

9.6CVSS6.8AI score0.00113EPSS
Exploits1References3
OSV
OSV
added 2023/08/31 4:54 p.m.40 views

RLSA-2023:4035 Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: 0-byte UDP payload Denial of Service CVE-2023-32067 c-ares: buffer overflow in configsortlist due to missing string length check...

8.6CVSS7.4AI score0.00343EPSS
Exploits1References6
Rockylinux
Rockylinux
added 2023/08/31 4:54 p.m.57 views

nodejs:18 security update

An update is available for nodejs-nodemon, module.nodejs, nodejs, module.nodejs-nodemon, module.nodejs-packaging, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

8.6CVSS7.8AI score0.00343EPSS
Exploits1
Rockylinux
Rockylinux
added 2023/08/31 4:54 p.m.35 views

nodejs:16 security update

An update is available for nodejs-nodemon, module.nodejs, nodejs, module.nodejs-nodemon, module.nodejs-packaging, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS8.5AI score0.00343EPSS
Exploits0
OSV
OSV
added 2023/08/15 7:15 p.m.3 views

CVE-2023-4344

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...

9.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2023/08/15 7:15 p.m.7 views

CVE-2023-4344

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...

9.8CVSS9.5AI score0.00106EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/08/15 6:25 p.m.16 views

CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...

9.7AI score0.00106EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/15 6:25 p.m.12 views

CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...

7.1AI score0.00106EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/15 12:0 a.m.3 views

PT-2023-28823 · Broadcom · Broadcom Raid Controller

Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to the improper use of ssl.rnd to set up a CIM connection. Recommendations: At the...

9.8CVSS6.5AI score0.00106EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/08/15 12:0 a.m.1 views

Broadcom RAID Controller Security Feature Issue Vulnerability

The Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation USA. A security vulnerability exists in the Broadcom RAID Controller that stems from incorrect use of ssl.rnd to set up a CIM connection, which makes the web interface susceptible to insufficient randomization...

9.8CVSS6.7AI score0.00106EPSS
Exploits0References2
Rows per page
Query Builder