CVE-2010-5079

SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens for 1 the CSRF protection mechanism, 2 autologin, 3 "forgot password" functionality, and 4 password salts, which makes it easier for remote attackers to bypass intended access restrictions via...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Уязвимость SafeWord e.Id

При исопльзовании токена генерируется короткий PIN, который может быть подобран методом перебора...

CVE-2000-0275

CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN...