Insecure Randomness

Spring AMQP is vulnerable to Predictable Correlation Identifier vulnerability as per NVD Description or CWE-330. The vulnerability is due to correlation IDs for RabbitTemplate.sendAndReceive replies being generated using a predictable internal counter, which allows an attacker to predict...

Spring AMQP Has Predictable Correlation IDs in RabbitTemplate.sendAndReceive() with Fixed Reply Queue

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

Malicious code in Be.Vlaanderen.Basisregisters.AspNetCore.Mvc.Midԁleware.AddCorrelatioոId (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanderen.Basisregisters.AspNetCоre.Mvс.Midԁleware.AddCorrelatioոId (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanԁeren.Basisregisters.AspNetCore.Mvc.Middleware.AddCorrelatioոIdToResponse (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaаnԁeren.Basisregisters.AspNetCorе.Mvc.Middleware.AddCorrelatioոIdToResponse (NuGet)

--- -= Per source details. Do not edit below this line.=-...

PT-2018-16289 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub version 0.20.17 Description: A buffer overflow issue exists in the /cameras/XXXX/clips handler of the video-core's HTTP server. The video-core process incorrectly handles user-controlled JSON payloads, leading to a...