87 matches found
Code injection
?The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successful...
Tridium Niagara AX Improper Authentication (CVE-2012-3024)
Tridium Niagara AX Framework through 3.6 uses predictable values for 1 session IDs and 2 keys, which might allow remote attackers to bypass authentication via a brute-force attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...
SUSE CVE-2009-3238
The getrandomint function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to...
CVE-2022-1615
In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...
CVE-2022-1615
In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...
CVE-2022-1615
A flaw was found in Samba. When the gnutlsrnd function is called, its return value is not verified, allowing it to give predictable random values when the call to the gnutlsrnd function fails...
GHSA-768M-5W34-2XF5 LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0
Impact The function used to generate random nonces was not sufficiently cryptographically complex. As a result values may be predictable and tokens may be forgable. Patches Users should upgrade to version 5.0 immediately Workarounds None...
CVE-2022-25047
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values...
CVE-2022-25047
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values...
CVE-2022-25047
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values...
PT-2022-17063 · Cwp · Cwp
Name of the Vulnerable Software and Affected Versions: CWP version 0.9.8.1126 Description: The password reset token is generated using known or predictable values. Recommendations: For CWP version 0.9.8.1126, consider disabling the password reset feature until a patch is available to prevent...
CWP Panel 安全特征问题漏洞
CWP Panel is a modern and advanced Linux control panel from CWP Inc. for web hosting service providers and system administrators. A security vulnerability exists in CWP Panel version v0.9.8.1126, which stems from a password reset token being generated using known or predictable values...
CVE-2022-28355
randomUUID in Scala.js before 1.10.0 generates predictable values...
CVE-2022-28355
randomUUID in Scala.js before 1.10.0 generates predictable values...
CVE-2022-28355
randomUUID in Scala.js before 1.10.0 generates predictable values...
CVE-2022-28355
randomUUID in Scala.js before 1.10.0 generates predictable values...
CVE-2022-28355: Use of Insufficiently Random Values
randomUUID in Scala.js before 1.10.0 generates predictable values...
in w7corp/easywechat
✍️ Description Insecure randomness errors occur when a function that can produce predictable values is used as a source of randomness in security-sensitive context. This code uses the rand function to generate "unique" identifiers for the receipt pages it generates. In this case the function that...
in w7corp/easywechat
✍️ Description Insecure randomness errors occur when a function that can produce predictable values is used as a source of randomness in security-sensitive context. This code uses the rand function to generate "unique" identifiers for the receipt pages it generates. In this case the function that...
CVE-2020-9502: Use of Insufficiently Random Values
Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...