CVE-2022-48195

An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated instead, the nonce is empty. This causes authentication to fail in the best case, but if paired...

CVE-2022-48195

An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated instead, the nonce is empty. This causes authentication to fail in the best case, but if paired...

CVE-2021-4238 Insufficient randomness in github.com/Masterminds/goutils

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by...

PT-2022-8301 · Unknown · Morgawr Muon

Name of the Vulnerable Software and Affected Versions: Morgawr Muon version 0.1.1 Description: A vulnerability has been found in Morgawr Muon, classified as problematic. It affects an unknown functionality of the file src/muon/handler.clj, leading to insufficiently random values. The attack can b...

GHSA-V367-P58W-98H5 PyCrypto makes Use of Insufficiently Random Values

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key...

TP-Link TL-WA850RE Randomness Privilege Escalation

The vulnerability of the microprogramming software in TP-Link’s wireless signal amplifier TP-Link TL-WA850RE V6 is related to the use of insufficiently random values. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

Ansible Configuration Management System Confidential Data Access

The vulnerability of the Ansible configuration management system is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker to access confidential data...

Red Hat Ansible Security Feature Issue Vulnerability

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to publish, manage, and organize computer systems. A security vulnerability previously existed in Ansible version 2.9.6, which stemmed from a flaw discovered when the program was...

DEBIAN-CVE-2020-10729

A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords a...

TI-NDKTCPIP ISN Generator Unauthorized Access

The vulnerability of the ISN generator implementation in the TI-NDKTCPIP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

MPLAB Net ISN Generator Unauthorized Access

The vulnerability of the ISN generator implementation in MPLAB Net protocols is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2021-2230 · Fnet · Fnet

Name of the Vulnerable Software and Affected Versions: FNET version 4.6.3 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the FNET protocol stack implementation. This could allow a remote attacker to gain unauthorized access to protected...

PT-2021-2223 · Unknown · Ethernut Nut/Os

Name of the Vulnerable Software and Affected Versions: Ethernut Nut/OS version 5.1 Description: An issue was discovered in the code that generates Initial Sequence Numbers ISNs for TCP connections, deriving the ISN from an insufficiently random source. This allows an attacker to determine the ISN...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

Multiple Schneider Electric Product Security Feature Issue Vulnerabilities

Schneider Electric Acti9 Smartlink SI D is a smart interface unit that realizes data communication between Acti9 electrical devices and Modbus devices. Schneider Electric Acti9 Smartlink SI D is an intelligent interface unit that enables data communication between Acti9 electrical devices and...

PT-2020-6904 · Unknown +1 · React Native Bluetooth Scan +1

Name of the Vulnerable Software and Affected Versions: Bluezone version 1.0.0 Description: The issue is related to the use of insufficiently random values in the React Native Bluetooth Scan component of the Bluezone application. This could allow a remote attacker to interfere with COVID-19 contac...

CVE-2020-11501: Use of Insufficiently Random Values

GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 2018-07-16 because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks...

CVE-2015-8851

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

CVE-2018-19441

The CVE-2018-19441 issue affects Neato Botvac Connected 2.2.0. The GenerateRobotPassword function in the NeatoCrypto library uses insufficiently random numbers for robot secret_key values used in local and cloud authentication/authorization. Entropy depends solely on the robot’s serial number (pr...

CVE-2019-5232

There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak...