4527 matches found
CVE-2016-8584: Improper Access Control
Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value...
PT-2017-7320
Name of the Vulnerable Software and Affected Versions Lenovo System Update formerly ThinkVantage System Update versions prior to 5.07.0019 Description The issue allows local users to gain privileges by predicting the credentials of a temporary administrator account, which requires knowledge of th...
PT-2017-8055
Name of the Vulnerable Software and Affected Versions Invision Power Services IPS Community Suite versions prior to 4.1.9 Description The issue makes session hijack easier by relying on the PHP uniqid function without the more entropy flag. Attackers can guess an Invision Power Board session cook...
Unspecified vulnerability in libxslt math.random function
libxslt is an XSLT XML Language for Defining XML Transformations C library developed for the GNOME project. A security vulnerability exists in libxslt 1.1.29 and earlier versions due to the program failing to initialize the EXSLT math.random function with a random seed. An attacker could use this...
Nintendo 3DS DNS Client Resolver Predictable TXID Vulnerability
The Nintendo 3DS DNS client resolver library uses a predictable incremented TXID allowing for the spoofing of responses. Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on th...
Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID
I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from spoofing responses. For example, see MS08-020 when this happened...
Nintendo 3DS DNS Client Resolver Predictable TXID
Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from...
Code injection
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
CVE-2015-9019
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
CVE-2015-9019
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
UBUNTU-CVE-2015-9019
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
CVE-2015-9019
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
CVE-2015-9019
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
CVE-2015-9019
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
PT-2017-7526
Name of the Vulnerable Software and Affected Versions libxslt versions 1.1.29 and earlier Description The issue is related to the EXSLT math.random function in libxslt, which was not initialized with a random seed during startup. This could cause the function to produce predictable outputs when...
CVE-2015-9019: Use of Insufficiently Random Values
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs...
CVE-2015-4624
Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens...
CVE-2015-4624
Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens...
PT-2017-6771
Name of the Vulnerable Software and Affected Versions Hak5 WiFi Pineapple versions 2.0 through 2.3 Description The issue concerns the use of predictable CSRF tokens. Recommendations For versions 2.0 through 2.3, consider disabling CSRF token generation until a patch is available, or apply...