CVE-2020-27556

A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device...

CVE-2020-27556

The CVE-2020-27556 entry concerns BASETech GE-131 BT-1837836 Wi‑Fi IP CCTV camera firmware 20180921, where a predictable device ID enables unauthenticated remote connection to the device. This is corroborated by NVD, RH, CNVD-style entries in the connected documents. No specific exploit details o...

PT-2020-16704

Name of the Vulnerable Software and Affected Versions BASETech GE-131 BT-1837836 firmware version 20180921 Description A predictable device ID in the firmware allows unauthenticated remote attackers to connect to the device. Recommendations For BASETech GE-131 BT-1837836 firmware version 20180921...

CVE-2020-27556: Use of Insufficiently Random Values

A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device...

CVE-2019-19794

The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries...

CVE-2020-27743

libtac in pamtacplus through 1.5.1 lacks a check for a failure of RANDbytes/RANDpseudobytes. This could lead to use of a non-random/predictable sessionid...

CVE-2020-27743

libtac in pamtacplus through 1.5.1 lacks a check for a failure of RANDbytes/RANDpseudobytes. This could lead to use of a non-random/predictable sessionid...

PT-2020-16796

Name of the Vulnerable Software and Affected Versions pam tacplus versions through 1.5.1 Description The issue is related to a lack of check for a failure of RAND bytes/RAND pseudo bytes in libtac, which could lead to the use of a non-random or predictable session id. Recommendations For versions...

CVE-2020-27743: Use of Insufficiently Random Values

libtac in pamtacplus through 1.5.1 lacks a check for a failure of RANDbytes/RANDpseudobytes. This could lead to use of a non-random/predictable sessionid...

CVE-2020-1905: Generation of Predictable Numbers or Identifiers

Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is...

Predictable Password

The cloud-init is using predictable password. It uses andom.choice when generating random password...

CVE-2020-26107

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

Code injection

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

CVE-2020-26107

Summary: CVE-2020-26107 affects cPanel prior to 88.0.3, where an upgrade establishes predictable PowerDNS API keys, per multiple connected sources. Affected software: cPanel versions before 88.0.3. Root cause / vulnerability detail: During upgrade, the process creates predictable API keys for Pow...

PT-2020-16290

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.3 Description The issue concerns the establishment of predictable PowerDNS API keys upon an upgrade. Recommendations For versions prior to 88.0.3, update to version 88.0.3 or later to resolve the issue...

CVE-2020-26107: Use of Insufficiently Random Values

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

Default credentials

In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The librar...

CVE-2020-15958

An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL...

Design/Logic Flaw

An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL...

CVE-2020-15958

An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL...