228 matches found
CVE-2022-48195
An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated instead, the nonce is empty. This causes authentication to fail in the best case, but if paired...
CVE-2022-48195
An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated instead, the nonce is empty. This causes authentication to fail in the best case, but if paired...
CVE-2021-4238 Insufficient randomness in github.com/Masterminds/goutils
Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by...
PT-2022-8301 · Unknown · Morgawr Muon
Name of the Vulnerable Software and Affected Versions: Morgawr Muon version 0.1.1 Description: A vulnerability has been found in Morgawr Muon, classified as problematic. It affects an unknown functionality of the file src/muon/handler.clj, leading to insufficiently random values. The attack can b...
GHSA-V367-P58W-98H5 PyCrypto makes Use of Insufficiently Random Values
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key...
The vulnerability of microprogramming software in TP-Link TL-WA850RE V6 wireless signal amplifiers is related to the use of insufficiently random values, which allows intruders to enhance their privileges.
The vulnerability of the microprogramming software in TP-Link’s wireless signal amplifier TP-Link TL-WA850RE V6 is related to the use of insufficiently random values. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...
The vulnerability of the Ansible configuration management system, related to the use of insufficiently random values, allows a attacker to gain access to confidential data.
The vulnerability of the Ansible configuration management system is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker to access confidential data...
Red Hat Ansible Security Feature Issue Vulnerability
Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to publish, manage, and organize computer systems. A security vulnerability previously existed in Ansible version 2.9.6, which stemmed from a flaw discovered when the program was...
DEBIAN-CVE-2020-10729
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords a...
The vulnerability of the ISN generator implementation in MPLAB Net protocols allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ISN generator implementation in MPLAB Net protocols is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability in the implementation of the ISN generator for the TI-NDKTCPIP protocol allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ISN generator implementation in the TI-NDKTCPIP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
PT-2021-2230 · Fnet · Fnet
Name of the Vulnerable Software and Affected Versions: FNET version 4.6.3 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the FNET protocol stack implementation. This could allow a remote attacker to gain unauthorized access to protected...
PT-2021-2223 · Unknown · Ethernut Nut/Os
Name of the Vulnerable Software and Affected Versions: Ethernut Nut/OS version 5.1 Description: An issue was discovered in the code that generates Initial Sequence Numbers ISNs for TCP connections, deriving the ISN from an insufficiently random source. This allows an attacker to determine the ISN...
CVE-2020-7548
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...
Multiple Schneider Electric Product Security Feature Issue Vulnerabilities
Schneider Electric Acti9 Smartlink SI D is a smart interface unit that realizes data communication between Acti9 electrical devices and Modbus devices. Schneider Electric Acti9 Smartlink SI D is an intelligent interface unit that enables data communication between Acti9 electrical devices and...
PT-2020-6904 · Unknown +1 · React Native Bluetooth Scan +1
Name of the Vulnerable Software and Affected Versions: Bluezone version 1.0.0 Description: The issue is related to the use of insufficiently random values in the React Native Bluetooth Scan component of the Bluezone application. This could allow a remote attacker to interfere with COVID-19 contac...
CVE-2015-8851
node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...
CVE-2018-19441
The CVE-2018-19441 issue affects Neato Botvac Connected 2.2.0. The GenerateRobotPassword function in the NeatoCrypto library uses insufficiently random numbers for robot secret_key values used in local and cloud authentication/authorization. Entropy depends solely on the robot’s serial number (pr...
CVE-2019-5232
There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak...
