4526 matches found
Schneider Electric Modicon PLCs Predictable Value Range
Binary data 720116.prm...
Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Predictable Value Range
Binary data 720125.prm...
Siemens WinCC and SIMATIC HMI Panels < 11.0.2.1 Multiple Vulnerabilities
Binary data 720014.prm...
PT-2019-12239
Name of the Vulnerable Software and Affected Versions HAProxy versions prior to 1.9.7 Description The issue arises from HAProxy mishandling a reload with rotated keys. This results in the use of uninitialized and very predictable HMAC keys, which is related to an error in include/types/ssl sock.h...
PT-2019-12481
Name of the Vulnerable Software and Affected Versions Das U-Boot versions v2014.04 through v2019.04 Description The issue concerns the generation of random UUID values. In scenarios where CONFIG RANDOM UUID is enabled and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a bo...
Denial Of Service (DoS) CPU Consumption
mingw32-libxml2 is vulnerable to denial of service. The attack exists because it uses predictable hashing function causing intentional collisions and does not prevent the attacker inputing a malicious message to an XML service, resulting in longer processing time, which could lead to a denial of...
CVE-2019-11641
Anomali Agave formerly Drupot through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system...
EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-1318)
According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon...
CVE-2019-11219: Use of Insufficiently Random Values
The algorithm used to generate device IDs UIDs for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices...
PT-2019-12195
Name of the Vulnerable Software and Affected Versions Shenzhen Yunni Technology iLnkP2P affected versions not specified Description The algorithm used to generate device IDs UIDs for devices that utilize iLnkP2P suffers from a predictability flaw, allowing remote attackers to establish direct...
EulerOS Virtualization 2.5.4 : rpm (EulerOS-SA-2019-1210)
According to the version of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that rpm uses temporary files with predictable names when installing an RPM. An attacker with ability to write in a...
Design/Logic Flaw
Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict valid future rolling codes, and can thus remotely control the alarm system in an unauthorized way...
Moxa EDS IKS Switches Unauthorized Access
The vulnerability of Moxa EDS and IKS microcontroller software lies in the use of a predictable cookie file during hashing. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information...
DEBIAN-CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...
PYSEC-2019-187
Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...
CVE-2018-19513
In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sqlerrorlog/YYYY-MM-DD-sqlerrorlog.log filenames. The log file could contain sensitive client data email addresses and also facilitates exploitation of SQL injection errors...
CVE-2018-19513
In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sqlerrorlog/YYYY-MM-DD-sqlerrorlog.log filenames. The log file could contain sensitive client data email addresses and also facilitates exploitation of SQL injection errors...
CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...
CVE-2018-19513
In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sqlerrorlog/YYYY-MM-DD-sqlerrorlog.log filenames. The log file could contain sensitive client data email addresses and also facilitates exploitation of SQL injection errors...
CVE-2018-19513: Insertion of Sensitive Information into Log File
In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sqlerrorlog/YYYY-MM-DD-sqlerrorlog.log filenames. The log file could contain sensitive client data email addresses and also facilitates exploitation of SQL injection errors...