Lucene search
+L

340 matches found

OSV
OSV
added 2021/06/09 8:15 p.m.4 views

CVE-2021-0131

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

6.5CVSS5.8AI score0.0081EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/09 7:10 p.m.33 views

CVE-2021-0131

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

6.5AI score0.0081EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.9 views

Intel Security Library 安全特征问题漏洞

Intel Security Library is the Intel Security Library for data center applications from Intel Corporation. A security signature issue vulnerability exists in Intel Security Library versions prior to 3.3, which stems from the use of a cryptographically weak pseudo-random number generator PRNG in th...

6.5CVSS6.5AI score0.0081EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/01 1:15 p.m.37 views

CVE-2021-23020

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys...

5.5CVSS0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/05 1:15 p.m.22 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5.3CVSS0.00945EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/05 1:15 p.m.13 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5.3CVSS6.8AI score
SaveExploits0References2
Prion
Prion
added 2021/05/05 1:15 p.m.15 views

Design/Logic Flaw

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5CVSS5.3AI score0.00945EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/05/05 12:25 p.m.23 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

6.6AI score0.00945EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/29 4:15 a.m.5 views

CVE-2020-11616

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator PRNG algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information...

7.5CVSS7.1AI score0.01316EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/29 4:15 a.m.21 views

Information disclosure

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator PRNG algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information...

5CVSS7.6AI score0.01316EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/06/04 12:0 a.m.42 views

D-Link DIR-865L Security Feature Issue Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A security feature issue vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which stems from the pseudo-random number generator using an easily guessable seed. No details of the vulnerability are provided...

7.5CVSS7AI score0.01296EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/03 5:15 p.m.7 views

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

7.5CVSS7.1AI score0.01296EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/06/03 4:23 p.m.29 views

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

7.6AI score0.01296EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2020/05/08 12:0 a.m.10 views

PT-2020-19183 · Broadcom +1 · Broadcom Chips +3

Name of the Vulnerable Software and Affected Versions: Broadcom chips affected versions not specified Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset Description: The issue arises from the use of a low-entropy Pseudo Random Number Generator PRNG in situations where a Hardware...

6.5CVSS6.3AI score0.0073EPSS
SaveExploits2References11
Veracode
Veracode
added 2020/04/10 12:53 a.m.92 views

Insecure Randomness

php is vulnerable to insecure randomness. The vulnerability as it was discovered that the PHP lcgvalue function used insufficient entropy to seed the pseudo-random number generator. A remote attacker could possibly use this flaw to predict values returned by the function, which are used to genera...

6.4CVSS3.2AI score0.07937EPSS
SaveExploits1References10Affected Software1
Veracode
Veracode
added 2020/04/10 12:22 a.m.33 views

Weak Random Number Generator

php is vulnerable to weak random number generator. The vulnerability exists as it was discovered that PHP did not properly seed its pseudo-random number generator used by functions such as rand and mtrand, possibly allowing an attacker to easily predict the generated pseudo-random values...

9.8CVSS2.3AI score0.04289EPSS
SaveExploits1References32Affected Software14
Tenable Nessus
Tenable Nessus
added 2020/04/02 12:0 a.m.56 views

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2020-1367)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - qemu-kvm is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu-kvm acts as a...

7.5CVSS6.7AI score0.03355EPSS
SaveExploits1References10
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2019-1448)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.1AI score0.03597EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2019/11/06 5:6 p.m.50 views

Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml

The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml...

4.9CVSS2.4AI score0.0113EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/10/24 2:15 p.m.4 views

CVE-2019-15703

An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA secret in a TLS client with a RSA handshake and mutual...

7.5CVSS7.1AI score0.00996EPSS
SaveExploits0References1
Rows per page
Query Builder