Lucene search
+L

3253 matches found

Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.8 views

PT-2025-51760

Name of the Vulnerable Software and Affected Versions NVIDIA Resiliency Extension for Linux affected versions not specified Description NVIDIA Resiliency Extension for Linux has an issue in its log aggregation process that allows for predictable log-file names. Exploitation of this issue could le...

8.4CVSS5.4AI score0.00268EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/15 7:37 p.m.11 views

GO-2025-4208 Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils...

9.8CVSS6.8AI score0.00418EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/13 8:2 p.m.7 views

CVE-2024-58311

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS6.8AI score0.00372EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/13 12:9 p.m.7 views

CVE-2025-14442

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

5.3CVSS5.7AI score0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/12 9:31 p.m.8 views

EUVD-2024-55350

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS6.3AI score0.00372EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/12 8:15 p.m.8 views

CVE-2024-58311

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS0.00372EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/12 7:57 p.m.5 views

CVE-2024-58311 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS6.5AI score0.00372EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/12 7:57 p.m.31 views

CVE-2024-58311 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS0.00372EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/12 7:57 p.m.14 views

CVE-2024-58311

Dormakaba Saflok System 6000 is affected by CVE-2024-58311 due to a predictable key generation algorithm that lets an attacker derive card access keys from a 32-bit card identifier. The underlying issue is a deterministic key derivation process, enabling key computation without requiring addition...

9.8CVSS6.5AI score0.00372EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/12 12:15 p.m.7 views

CVE-2025-14442

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

5.3CVSS0.00286EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.8 views

Dormakaba Saflok System 安全漏洞

Dormakaba Saflok System is a hotel access control and security management system from Dormakaba USA. A security vulnerability exists in Dormakaba Saflok System 6000 that stems from a predictable key generation algorithm that could lead to the derivation of card access keys...

9.8CVSS6.6AI score0.00372EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.15 views

PT-2025-50973

Name of the Vulnerable Software and Affected Versions Dormakaba Saflok System 6000 affected versions not specified Description The Dormakaba Saflok System 6000 uses a key generation algorithm that is predictable. This allows attackers to calculate card access keys from a 32-bit unique identifier...

9.8CVSS6.4AI score0.00372EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.13 views

PT-2025-50926

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

5.3CVSS5.7AI score0.00286EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/11 8:39 a.m.18 views

CVE-2025-13955

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS5.8AI score0.00164EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.5 views

EulerOS 2.0 SP11 : avahi (EulerOS-SA-2025-2454)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS...

5.3CVSS6.6AI score0.00681EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/10 9:15 a.m.11 views

CVE-2025-13955

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS0.00164EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/10 8:30 a.m.5 views

CVE-2025-13955

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS5.8AI score0.00164EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/10 8:30 a.m.25 views

CVE-2025-13955

CVE-2025-13955 describes a vulnerability in EZCast Pro II dongle (software version 1.17478.146) where the Wi‑Fi access point password is predictable. Attackers within Wi‑Fi range can deduce the default password from observable device identifiers, granting access to the dongle. The vulnerability i...

9.3CVSS5.8AI score0.00164EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/10 2:32 a.m.15 views

CVE-2025-66565

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.8CVSS6.6AI score0.00418EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 4:18 p.m.13 views

CVE-2025-66565

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.8CVSS0.00418EPSS
SaveExploits0References2
Rows per page
Query Builder