CVE-2019-10755

The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml...

Design/Logic Flaw

Lenovo System Update formerly ThinkVantage System Update before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service SUService.exe through an unspecified named pipe...

PT-2015-5671

Name of the Vulnerable Software and Affected Versions Lenovo System Update versions prior to 5.06.0034 Description The issue allows local users to gain privileges by sending a valid token with a command to the System Update service through an unspecified named pipe, due to the use of predictable...

CVE-2015-2219: Undefined Security Weakness

Lenovo System Update formerly ThinkVantage System Update before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service SUService.exe through an unspecified named pipe...

PT-2013-6024

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x through 6.28 Drupal versions 7.x through 7.23 Description The issue allows remote attackers to predict security strings and bypass intended restrictions via a brute force attack, due to the use of the PHP mt rand function t...