The vulnerability in the Networking component of Java SE and Java SE Embedded software platforms allows a attacker to cause a service failure.

The vulnerability of the Networking component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures using various network protocols...

The vulnerability of the Portal sub-component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Portal subcomponent of the Oracle PeopleSoft Enterprise PeopleTools business application suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...

The vulnerability of the Outside In Filters component within the software development kit (SDK) of Outside In Technology allows a malicious individual to gain unauthorized access to read, modify, add, or delete data, or to cause a service failure.

The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...

CVE-2019-16208

Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...

CVE-2019-16208

Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...

GHSA-RC75-CF5C-MXVH Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml

The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml...

Kernel: page cache side channel attacks

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...

CVE-2013-2257

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

Design/Logic Flaw

Cryptocat before 2.0.22: Cryptocat.random Function Array Key has Entropy Weakness...

Design/Logic Flaw

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

CVE-2013-2260

CVE-2013-2260 concerns Cryptocat before 2.0.22, with an entropy weakness in the Cryptocat.random() Function Array Key. The connected documents consistently describe this entropy weakness; explicit exploitation details or mitigations are not provided in the sources.

CVE-2013-2260

Cryptocat before 2.0.22: Cryptocat.random Function Array Key has Entropy Weakness...

CVE-2013-4101

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...

CVE-2013-4102

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

Hardcoded credentials

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...

Code injection

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

CVE-2013-4101

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...

CVE-2013-4101

Cryptocat (versions before 2.0.22) is affected by CVE-2013-4101 due to a Link Markup Decorator HTML Handling Weakness. The vulnerability enables the generation of invalid HTML code within the application’s markup processing. Red Hat and CNVD entries corroborate the same affected version range and...

CVE-2013-4102

CVE-2013-4102 affects Cryptocat prior to 2.0.22 due to a weakness in strophe.js Math.random() RNG. Public sources in the provided documents describe it as a randomness weakness that can impact confidentiality and integrity (per NVD CVSSv2 6.4, CVSSv3.1 9.1). Connected records repeatedly reference...

The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...