Lucene search
K

3096 matches found

Github Security Blog
Github Security Blog
added 2022/11/16 12:0 p.m.17 views

PHPServerMon PRNG has Insufficient Entropy

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may b...

5.3CVSS7.1AI score0.00769EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/11/16 12:0 p.m.9 views

GHSA-97W9-GCC7-VR8G Insufficient Entropy in PHPServerMon PRNG

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...

5.3CVSS4.5AI score0.00803EPSS
Exploits1References5
NVD
NVD
added 2022/11/15 11:15 p.m.13 views

CVE-2021-4241

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may b...

5.3CVSS0.00769EPSS
Exploits1References3
NVD
NVD
added 2022/11/15 11:15 p.m.12 views

CVE-2021-4240

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...

5.3CVSS0.00803EPSS
Exploits1References3
OSV
OSV
added 2022/11/15 11:15 p.m.10 views

CVE-2021-4240

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...

5.3CVSS5.4AI score
Exploits0References3
Prion
Prion
added 2022/11/15 11:15 p.m.21 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...

5CVSS5.3AI score0.00803EPSS
Exploits1References3
Prion
Prion
added 2022/11/15 11:15 p.m.13 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may b...

5CVSS5.3AI score0.00769EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2022/11/15 12:0 a.m.5 views

CVE-2021-4241 phpservermon User.php setUserLoggedIn predictable algorithm in random number generator

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may b...

2.6CVSS5.7AI score0.00769EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2022/11/15 12:0 a.m.4 views

CVE-2021-4240 phpservermon User.php generatePasswordResetToken predictable algorithm in random number generator

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...

2.6CVSS4.2AI score0.00803EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/11/15 12:0 a.m.2 views

PT-2022-11593 · Unknown · Phpservermon

Name of the Vulnerable Software and Affected Versions: phpservermon affected versions not specified Description: A vulnerability was found in phpservermon, affecting the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to the use of a predictable algorithm in ...

5.3CVSS5.2AI score0.00769EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2022/11/15 12:0 a.m.4 views

PT-2022-11592 · Unknown · Phpservermon

Name of the Vulnerable Software and Affected Versions: phpservermon affected versions not specified Description: A problematic issue was found in phpservermon, affecting the generatePasswordResetToken function of the file src/psm/Service/User.php. The manipulation leads to the use of a predictabl...

5.3CVSS5.1AI score0.00803EPSS
Exploits1References10
Cvelist
Cvelist
added 2022/11/15 12:0 a.m.27 views

CVE-2021-4241 phpservermon User.php setUserLoggedIn predictable algorithm in random number generator

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may b...

2.6CVSS5.6AI score0.00769EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/11/15 12:0 a.m.31 views

CVE-2021-4240 phpservermon User.php generatePasswordResetToken predictable algorithm in random number generator

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...

2.6CVSS5.6AI score0.00803EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2022/11/09 6:2 p.m.71 views

CVE-2022-31008

A flaw was found in RabbitMQ. The shovel and federation plugins perform URI obfuscation in their worker link state. The encryption key used to encrypt the URI was seeded with a predictable secret. In certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable dat...

7.5CVSS0.7AI score0.00307EPSS
Exploits0References5
Code423n4
Code423n4
added 2022/10/25 12:0 a.m.10 views

Pseudo randomness is not recommended

Lines of code Vulnerability details Impact Use of pseudo randomness in chain is not recommended as it can be predicted by anyone, this can affect value in case of minting or withdrawing in some scenarios Proof of Concept Tools Used Recommended Mitigation Steps Use oracles --- The text was updated...

6.9AI score
Exploits0
Code423n4
Code423n4
added 2022/10/25 12:0 a.m.16 views

Weak randomness

Lines of code Vulnerability details Vulnerability details Description In the function crossChainMessage of HolographOperator contract there is the following logic implemented for the calculation of the random value: / @dev use job hash, job nonce, block number, and block timestamp for generating ...

6.8AI score
Exploits0
Veracode
Veracode
added 2022/10/15 6:35 p.m.29 views

Information Disclosure

samba is vulnerable to information disclosure. A local authenticated attacker is able to gain access to confidential information, because GnuTLS gnutlsrnd may fail and give predictable random values...

5.5CVSS5.6AI score0.00408EPSS
Exploits1References6Affected Software2
OSV
OSV
added 2022/10/13 7:15 p.m.2 views

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

4.3CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2022/10/13 7:15 p.m.17 views

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

4.3CVSS0.00646EPSS
Exploits1References2
Prion
Prion
added 2022/10/13 7:15 p.m.9 views

Code injection

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

4CVSS4.8AI score0.00646EPSS
Exploits1References2Affected Software3
Rows per page
Query Builder