89 matches found
CVE-2017-3186
CVE-2017-3186 affects ACTi cameras (D, B, I, E series) with firmware A1D-500-V6.11.31-AC, which uses non-random default admin credentials across all devices, enabling a remote attacker to take complete control of the device. Related issues include CVE-2017-3184 (factory-reset access) and CVE-2017...
nodejs: Constant Hashtable Seeds vulnerability
It was found that Node.js was using a non-randomized seed when populating hash tables. An attacker, able to supply a large number of inputs, could send specially crafted entries to the Node.js application, maximizing hash collisions to trigger an excessive amount of CPU usage, resulting in a deni...
nodejs: Constant Hashtable Seeds vulnerability
It was found that Node.js was using a non-randomized seed when populating hash tables. An attacker, able to supply a large number of inputs, could send specially crafted entries to the Node.js application, maximizing hash collisions to trigger an excessive amount of CPU usage, resulting in a deni...
CVE-2017-7905
A Weak Cryptography for Passwords issue was discovered in General Electric GE Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Versio...
Trend Micro Threat Discovery Appliance 2.6.1062r1 Session Generation Authentication Bypass
!/usr/bin/python """ Trend Micro Threat Discovery Appliance = 2.6.1062r1 Session Generation Authentication Bypass Vulnerability Found by: Roberto Suggi Liverani - @malerisch - http://blog.malerisch.net/ & Steven Seeley of Source Incite File: TDAInstallationCD.2.6.1062r1.enUS.iso sha1:...
SUSE SLED11 / SLES11 Security Update : ntp (SUSE-SU-2015:1173-1)
ntp was updated to fix two security issues : CVE-2015-1799: ntpd authentication did not protect symmetric associations against DoS attacks bsc924202 CVE-2015-3405: ntp-keygen may generate non-random symmetric keys on big-endian systems bsc928321 Note that Tenable Network Security has extracted th...
CVE-2012-0808
as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack...
CVE-2006-4312
Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0x up to 7.05 and 7.1x up to 7.12.4, and Firewall Services Module FWSM 3.1x up to 3.11.6, causes the EXEC password, local user passwords, and the enable password to be changed to a "non-rando...
