1918 matches found
GHSA-GQ9M-QVPX-68HC Pallets Werkzeug Insufficient Entropy
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id...
New Bluetooth Vulnerability Lets Attackers Spy On Encrypted Connections
Over a billion Bluetooth-enabled devices, including smartphones, laptops, smart IoT devices, and industrial devices, have been found vulnerable to a high severity vulnerability that could allow attackers to spy on data transmitted between the two devices. The vulnerability, assigned as...
CVE-2016-10854
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...
CVE-2016-10854
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...
Design/Logic Flaw
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...
CVE-2016-10854
CVE-2016-10854 affects cPanel prior to 11.54.0.4, where the X3 Entropy Banner interface is vulnerable to a self XSS. The description is corroborated across multiple feeds (e.g., NVD and RH advisories) as a self-XSS in the X3 Entropy Banner. The available sources do not provide exploit details or ...
CVE-2016-10854
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...
Security update for libgcrypt (moderate)
openSUSE Security Update: Security update for libgcrypt Announcement ID: openSUSE-SU-2019:1792-1 Rating: moderate References: 1097073 1125740 1138939 Cross-References: CVE-2019-12904 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...
Fails and Fixes with IoT
After nearly 6 years of tearing apart 'internet of things' devices, here's a look at the high level fails that we keep seeing. We're not going to go in to point issues such as Wi-Fi credential leakage and Bluetooth compromise: our blog is littered with those! What are the root issues and what can...
Whonix v15 - Anonymous Operating System
Whonix is an operating system focused on anonymity, privacy and security. It’s based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user’s real IP. Whonix consists of two parts: One...
Insufficient Entropy in DotNetNuke
DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...
GHSA-PF46-GQG9-J3V3 Insufficient Entropy in DotNetNuke
DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...
GHSA-XX3H-J3CX-8QFJ Insufficient Entropy in DotNetNuke
DNN aka DotNetNuke 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812...
Insufficient Entropy in DotNetNuke
DNN aka DotNetNuke 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812...
CVE-2018-18326
DNN aka DotNetNuke 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812...
CVE-2018-15812
DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...
CVE-2018-15812
DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...
Code injection
DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...
CVE-2018-18326
Summary: CVE-2018-18326 affects DNN (DotNetNuke) 9.2 through 9.2.2, which incorrectly converts encryption key source values, yielding lower entropy. This issue is noted as stemming from an incomplete fix for CVE-2018-15812. The connected sources identify the vulnerable versions and link to relate...