Lucene search
+L

7043 matches found

OSV
OSV
added 2008/07/18 4:41 p.m.11 views

DEBIAN-CVE-2008-3217

PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...

6.8CVSS6.4AI score0.0181EPSS
SaveExploits0References1
Prion
Prion
added 2008/07/18 4:41 p.m.20 views

Input validation

PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...

6.8CVSS6.5AI score0.03964EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
added 2008/07/18 4:00 p.m.35 views

CVE-2008-3217

PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...

6.4AI score0.0181EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2008/07/16 9:57 a.m.11 views

PHP weak 64 bit random seed

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against...

9.8CVSS7.4AI score0.04289EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2008/07/16 9:55 a.m.59 views

Moderate: Red Hat Security Advisory: php security and bug fix update

Updated php packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

10CVSS7.3AI score0.04696EPSS
SaveExploits3References8
RedHat Linux
RedHat Linux
added 2008/07/16 9:36 a.m.11 views

PHP 32 bit weak random seed

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

7.5CVSS5.8AI score0.03392EPSS
SaveExploits1References4
OSV
OSV
added 2008/07/16 12:00 a.m.33 views

DSA-1544-2 pdns-recursor - predictable randomness

Bulletin has no description...

6.8CVSS6.4AI score0.03964EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2008/07/16 12:00 a.m.260 views

RHEL 4 : php (RHSA-2008:0545)

Updated php packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

10CVSS7.8AI score0.04696EPSS
SaveExploits3References13
Tenable Nessus
Tenable Nessus
added 2008/07/16 12:00 a.m.256 views

RHEL 3 / 5 : php (RHSA-2008:0544)

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

10CVSS7.9AI score0.04696EPSS
SaveExploits3References13
Fedora
Fedora
added 2008/07/09 2:49 a.m.21 views

[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

7.5CVSS0.8AI score0.05228EPSS
SaveExploits1
Fedora
Fedora
added 2008/07/09 2:48 a.m.32 views

[SECURITY] Fedora 8 Update: sipp-3.1-2.fc8

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

7.5CVSS0.8AI score0.05228EPSS
SaveExploits1
securityvulns
securityvulns
added 2008/07/09 12:00 a.m.182 views

Microsoft Windows DNS server and DNS client DNS reply spoofing

Weak pseudo-random generator is used to generate DNS request ID...

9.4CVSS1.7AI score0.95182EPSS
SaveExploits26References6
NVD
NVD
added 2008/07/08 6:41 p.m.14 views

CVE-2008-3072

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

7.5CVSS6.6AI score0.00994EPSS
SaveExploits0References2
Prion
Prion
added 2008/07/08 6:41 p.m.16 views

Design/Logic Flaw

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

7.5CVSS7.2AI score0.00994EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2008/07/08 6:00 p.m.51 views

CVE-2008-3072

CVE-2008-3072 affects Simple Machines Forum (SMF) versions 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 when running under PHP versions earlier than 4.2.0. The issue is that the random number generator is not seeded properly, with an impact that is currently described as unknown. The provided d...

7.5CVSS6.6AI score0.00994EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2008/07/08 6:00 p.m.19 views

CVE-2008-3072

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

6.6AI score0.00994EPSS
SaveExploits0References2
Prion
Prion
added 2008/07/07 6:41 p.m.20 views

Information disclosure

The PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors...

5CVSS6.6AI score0.01009EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2008/07/07 6:41 p.m.25 views

CVE-2008-3048

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality."...

7.5CVSS6.5AI score0.01126EPSS
SaveExploits0References3
Prion
Prion
added 2008/07/07 6:41 p.m.20 views

Code injection

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality."...

7.5CVSS7AI score0.01126EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2008/07/07 6:41 p.m.20 views

CVE-2008-3049

The PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors...

5CVSS6.1AI score0.01009EPSS
SaveExploits0References3
Rows per page
Query Builder