Lucene search
+L

2001 matches found

OSV
OSV
added 2021/07/19 12:15 p.m.7 views

CVE-2021-33027

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce...

9.8CVSS7.3AI score0.01325EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/07/19 12:15 p.m.37 views

CVE-2021-33027

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce...

9.8CVSS7.2AI score0.01325EPSS
SaveExploits0References3
Prion
Prion
added 2021/07/19 12:15 p.m.19 views

Design/Logic Flaw

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce...

7.5CVSS9.4AI score0.01325EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/07/19 12:15 p.m.11 views

UBUNTU-CVE-2021-33027

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce...

9.8CVSS5.8AI score0.01325EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/07/19 12:15 p.m.12 views

CVE-2021-33027

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce...

9.8CVSS7AI score0.01325EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/07/19 11:52 a.m.31 views

CVE-2021-33027

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce...

9.7AI score0.01325EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/19 11:52 a.m.51 views

CVE-2021-33027

The CVE-2021-33027 entry concerns Sylabs Singularity Enterprise

9.8CVSS9.4AI score0.01325EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/07/19 11:52 a.m.59 views

CVE-2021-33027

Removed by vendor...

9.8CVSS7.3AI score0.01325EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/07/19 12:00 a.m.10 views

Sylabs Singularity 安全特征问题漏洞

Sylabs Singularity is an open source container management platform from Sylabs, Inc. in the United States. The software supports building applications on their desktops and running hundreds or thousands of instances on any public cloud or at the compute edge. Sylabs Singularity Enterprise has a...

9.8CVSS8.2AI score0.01325EPSS
SaveExploits0References3
Rosalinux
Rosalinux
added 2021/07/02 4:44 p.m.34 views

Advisory ROSA-SA-2021-1838

Software: gcc 4.8.5 OS: Cobalt 7.9 CVE-ID: CVE-2018-12886 CVE-Crit: HIGH CVE-DESC: stackprotectprologue in cfgexpand.c and stackprotectepilogue in function.c in GNU Compiler Collection GCC 4.1 through 8 under certain circumstances generate sequences of instructions when targeting ARM targets that...

8.1CVSS7.2AI score0.03181EPSS
SaveExploits1
CNVD
CNVD
added 2021/07/02 12:00 a.m.21 views

Unauthorized Access Vulnerability in web3.0 of Central Time Attendance Machine of Entropy Base Technology Co.

Entropy Base Technology Co., Ltd Entropy Base Technology is a national high-tech enterprise specializing in providing smart identity verification, smart entrance/exit management and smart office products and solutions with biometrics as the core technology. Entropy Base Technology Co., Ltd. china...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/06/23 12:00 a.m.22 views

Weak Password Vulnerability in the web management platform of China Control Time & Attendance Machine

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. A weak password vulnerability exists in the web-based management platform of ZhongControl Time and Attendance Machine, which c...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/06/23 12:00 a.m.20 views

Arbitrary File Download Vulnerability in Web Management Platform of Time Attendance Machine of China Control

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. An arbitrary file download vulnerability exists in the web management platform of ZhongControl Attendance Machine, which can b...

7AI score
SaveExploits0
OSV
OSV
added 2021/06/10 5:23 p.m.31 views

GHSA-RMW5-XPG9-JR29 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

7.5CVSS7.3AI score0.01353EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/06/10 5:23 p.m.81 views

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

7.5CVSS7.3AI score0.01353EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2021/05/26 1:13 p.m.53 views

CVE-2020-26556

A flaw was found in the Linux kernel’s authentication protocol in the Bluetooth® Mesh Profile Specification. A vulnerability occurs if the AuthValue is identified during the provisioning procedure, even if the AuthValue is selected randomly. This flaw allows an attacker to identify the AuthValue...

7.5CVSS2AI score0.00907EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/05/21 12:00 a.m.7 views

PT-2021-23607 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 1.1.1 Description: Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least o...

9.1CVSS7.3AI score0.01319EPSS
SaveExploits1References17
CNVD
CNVD
added 2021/04/18 12:00 a.m.7 views

Weak Password Vulnerability in Time Refinement Management Platform of Entropy Base Technology Co. Ltd (CNVD-2021-30899)

formerly known as: China Control Intelligence Technology Co., Ltd. was founded in 2007, focusing on the research of hybrid biometrics technology and the application of technology enterprises, is a "people, vehicles, things" based on the entrance and exit time and security management system produc...

7.1AI score
SaveExploits0
OSV
OSV
added 2021/04/14 8:04 p.m.69 views

GO-2020-0018

UUIDs generated using NewV1 and NewV4 may not read the expected number of random bytes. These UUIDs may contain a significantly smaller amount of entropy than expected, possibly leading to collisions...

1.8AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the rand() and random() functions in software certification for wireless network WPA devices, related to the lack of entropy in PIN selection, allows a hacker to trigger a service failure.

The vulnerability of the rand and random functions in software device certification for wireless networks with WPA security is related to a lack of entropy in the PIN selection process. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.3CVSS7.2AI score0.03842EPSS
SaveExploits1References9Affected Software3
Rows per page
Query Builder