Lucene search
+L

842 matches found

seebug.org
seebug.org
added 2009/12/24 12:0 a.m.15 views

Apache 1.3.29 证书预测

No description provided by source...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2009/12/16 6:0 p.m.39 views

CVE-2009-4326

The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature DPF is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicti...

6.3AI score0.0179EPSS
SaveExploits0References9
CVE
CVE
added 2009/12/16 6:0 p.m.73 views

CVE-2009-4326

The CVE-2009-4326 issue affects IBM DB2 9.5 before FP5 and 9.7 before FP1 when the Database Partitioning Feature (DPF) is used. The RAND scalar function in the Common Code Infrastructure can produce repeating values, which may allow an attacker to predict randomness and defeat protection mechanis...

4.3CVSS6.2AI score0.0179EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2009/09/18 10:0 a.m.27 views

CVE-2009-3238

The getrandomint function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to...

5.7AI score0.01632EPSS
SaveExploits2References13
CVE
CVE
added 2009/09/18 10:0 a.m.115 views

CVE-2009-3238

CVE-2009-3238 affects the Linux kernel (pre-2.6.30) where get_random_int in drivers/char/random.c produced insufficiently random numbers, enabling prediction of return values and potentially defeating defenses based on randomness. Several OS advisories (e.g., RHSA-2009:1438, ELSA-2009-1106/1438, ...

7.8CVSS5.7AI score0.01632EPSS
SaveExploits2References13Affected Software1
ThreatPost
ThreatPost
added 2009/05/06 7:19 p.m.6 views

Prediction: Apple will recommend security software

From CNet Jon Oltsik As an analyst, it is my job to follow the industry, internalize trends, and then use this information to make predictions. OK, here goes: Within the next 18 months, Apple will begin recommending that Macintosh users install Internet security software on all systems. Now I...

3AI score
SaveExploits0References2
exploitpack
exploitpack
added 2009/03/23 12:0 a.m.42 views

Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities

Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC Processing Unit II multiple vulnerabilities Release Date: 2009-03-23 Last Modified: 2009-03-22 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/03/23 12:0 a.m.78 views

Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities

Louhi Networks Oy -= Security Advisory =- Advisory: Rittal CMC-TC Processing Unit II multiple vulnerabilities Release Date: 2009-03-23 Last Modified: 2009-03-22 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: Rittal CMC-TC PU II Web management Devices: CMC-TC PU II D...

5.8AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2009/03/11 2:19 p.m.4 views

CVE-2009-0234

The DNS Resolver Cache Service aka DNSCache in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted...

6.4CVSS6.7AI score0.34442EPSS
SaveExploits1References12
OpenVAS
OpenVAS
added 2009/03/06 12:0 a.m.47 views

RedHat Update for kernel RHSA-2007:1049-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2007:1049-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

4.9CVSS0.6AI score0.00431EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.46 views

CentOS Update for kernel CESA-2007:1049 centos3 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2007:1049 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.9CVSS0.4AI score0.00431EPSS
SaveExploits0References2
Prion
Prion
added 2008/11/26 11:30 p.m.32 views

Design/Logic Flaw

The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various...

6.9CVSS6.7AI score0.00319EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/10/08 12:0 a.m.35 views

Opera < 9.60 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.60 and thus reportedly affected by several issues : - Specially crafted URLs can cause Opera to crash or allow arbitrary code execution. - Once a Java applet has been cached, a page that can predict the cache path for that applet...

9.3CVSS6AI score0.09753EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2008/09/15 12:0 a.m.34 views

Simple Machines Forum Validation Code Prediction Arbitrary Password Reset

The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The version of Simple Machines Forum installed on the remote host generates validation codes for its password reset functionality with 'rand', which on Windows platforms has a maximum value ...

7.5CVSS5.8AI score0.07131EPSS
SaveExploits3References2
RedHat Linux
RedHat Linux
added 2008/07/02 1:15 p.m.8 views

PHP 32 bit weak random seed

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

7.5CVSS5.8AI score0.03392EPSS
SaveExploits1References4
Prion
Prion
added 2008/05/07 9:20 p.m.25 views

Design/Logic Flaw

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

7.5CVSS6.5AI score0.03392EPSS
SaveExploits1References32Affected Software1
Cvelist
Cvelist
added 2008/05/07 9:0 p.m.24 views

CVE-2008-2107

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

9.5AI score0.03392EPSS
SaveExploits1References32
Prion
Prion
added 2008/04/11 7:5 p.m.13 views

Sql injection

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2008/04/11 7:5 p.m.13 views

CVE-2008-1732

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action...

7.5CVSS8.3AI score0.00967EPSS
SaveExploits2References4
CVE
CVE
added 2008/04/11 7:0 p.m.37 views

CVE-2008-1732

CVE-2008-1732 affects Prediction Football 1.x. A SQL injection exists in showpredictionsformatch.php via the matchid parameter in a dupa action, allowing remote attackers to execute arbitrary SQL commands. Exploitation details, patch/version info, and official remediation are not provided in the ...

7.5CVSS8.3AI score0.00967EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder