704 matches found
Exposure of Sensitive Information in Plone
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG...
GHSA-WPRR-MC54-C62Q Exposure of Sensitive Information in Plone
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG...
HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG
aws/resourceawsiamuserloginprofile.go in the HashiCorp Terraform Amazon Web Services AWS provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password...
GHSA-R48H-JR2J-9G78 HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG
aws/resourceawsiamuserloginprofile.go in the HashiCorp Terraform Amazon Web Services AWS provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password...
CVE-2021-36171
CVE-2021-36171 affects Fortinet FortiPortal prior to 6.0.6, where the password-reset feature uses a cryptographically weak pseudo‑random number generator. This may let a remote unauthenticated attacker predict parts of or the entire newly generated password within a time window. Documented CVSSv3...
Siemens SIMATIC S7-1200 Insufficient Entropy in PRNG (CVE-2014-2250)
The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than...
Mageia: Security Advisory (MGASA-2014-0144)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-43799
Zulip is an open-source team collaboration tool. Zulip Server installs RabbitMQ for internal message passing. In versions of Zulip Server prior to 4.9, the initial installation until first reboot, or restart of RabbitMQ does not successfully limit the default ports which RabbitMQ opens; this...
CVE-2021-45484
In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...
CVE-2021-45489
In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...
Code injection
In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...
Code injection
In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...
CVE-2021-45484
In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...
CVE-2021-45489
In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...
CVE-2021-45489
CVE-2021-45489 refers to NetBSD up to 9.2 where the IPv6 Flow Label generation uses a weak cryptographic PRNG. Affected: NetBSD 9.2 and earlier IP stack behavior related to Flow Label generation. Consequence: potential information leakage or traffic-related exposure described by multiple sources;...
PT-2021-24250 · Netbsd · Netbsd
Name of the Vulnerable Software and Affected Versions: NetBSD versions prior to 9.3 Description: The issue concerns a weak cryptographic PRNG used in the IPv6 fragment ID generation algorithm. Recommendations: For NetBSD versions prior to 9.3, update to version 9.3 or later to resolve the issue...
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
GHSA-VRGH-5W3C-GGF8 showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
showdoc security feature issue vulnerability
showdoc is open source and a great tool for IT teams to share documents online. showDoc is vulnerable to a security feature issue that stems from the use of an encrypted weak pseudo-random number generator PRNG. No detailed vulnerability details are currently available...