Lucene search
+L

369 matches found

Cvelist
Cvelist
•added 2021/06/09 7:10 p.m.•47 views

CVE-2021-0131

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

6.5AI score0.0081EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/06/09 12:00 a.m.•19 views

Intel Security Library 安全特征问题漏洞

Intel Security Library is the Intel Security Library for data center applications from Intel Corporation. A security signature issue vulnerability exists in Intel Security Library versions prior to 3.3, which stems from the use of a cryptographically weak pseudo-random number generator PRNG in th...

6.5CVSS6.5AI score0.0081EPSS
SaveExploits0References3
NVD
NVD
•added 2021/06/01 1:15 p.m.•47 views

CVE-2021-23020

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys...

5.5CVSS0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/01 12:00 a.m.•0 views

PT-2021-15346

Name of the Vulnerable Software and Affected Versions NAAS versions prior to 3.10.0 Description The issue concerns the generation of API keys using an insecure pseudo-random string and hashing algorithm, which could lead to predictable keys. Recommendations For versions prior to 3.10.0, update to...

5.5CVSS0.00255EPSS
SaveExploits0References3
NVD
NVD
•added 2021/05/05 1:15 p.m.•35 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5.3CVSS0.00945EPSS
SaveExploits0References2
OSV
OSV
•added 2021/05/05 1:15 p.m.•22 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5.3CVSS6.8AI score
SaveExploits0References2
Prion
Prion
•added 2021/05/05 1:15 p.m.•24 views

Design/Logic Flaw

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5CVSS5.3AI score0.00945EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/05/05 1:15 p.m.•11 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

5.3CVSS6.2AI score0.00945EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/05/05 12:25 p.m.•41 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

6.6AI score0.00945EPSS
SaveExploits0References2
Mend
Mend
•added 2021/05/05 12:25 p.m.•2 views

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key...

6.9CVSS0.00945EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/05 12:00 a.m.•4 views

PT-2021-18140

Name of the Vulnerable Software and Affected Versions: BTCPay Server versions 1.0.0 through 1.0.7.0 Description: The issue is related to the generation of a legacy API key using a weak method to produce pseudo-random values. Recommendations: For BTCPay Server versions 1.0.0 through 1.0.7.0,...

5.3CVSS0.00945EPSS
SaveExploits0References6
OSV
OSV
•added 2020/10/29 4:15 a.m.•16 views

CVE-2020-11616

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator PRNG algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information...

7.5CVSS7.1AI score0.01332EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/29 4:15 a.m.•29 views

Information disclosure

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator PRNG algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information...

5CVSS7.6AI score0.01332EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2020/06/04 12:00 a.m.•61 views

D-Link DIR-865L Security Feature Issue Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A security feature issue vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which stems from the pseudo-random number generator using an easily guessable seed. No details of the vulnerability are provided...

7.5CVSS7AI score0.01296EPSS
SaveExploits1References1
OSV
OSV
•added 2020/06/03 5:15 p.m.•17 views

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

7.5CVSS7.1AI score0.01296EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/06/03 4:23 p.m.•42 views

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

7.6AI score0.01296EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/03 12:00 a.m.•7 views

CVE-2020-13784: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

7.5CVSS5.8AI score0.01296EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/08 12:00 a.m.•15 views

PT-2020-19183 · Broadcom +1 · Broadcom Chips +3

Name of the Vulnerable Software and Affected Versions: Broadcom chips affected versions not specified Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset Description: The issue arises from the use of a low-entropy Pseudo Random Number Generator PRNG in situations where a Hardware...

6.5CVSS6.3AI score0.0073EPSS
SaveExploits2References11
Veracode
Veracode
•added 2020/04/10 12:53 a.m.•99 views

Insecure Randomness

php is vulnerable to insecure randomness. The vulnerability as it was discovered that the PHP lcgvalue function used insufficient entropy to seed the pseudo-random number generator. A remote attacker could possibly use this flaw to predict values returned by the function, which are used to genera...

6.4CVSS3.2AI score0.08088EPSS
SaveExploits2References10Affected Software1
Veracode
Veracode
•added 2020/04/10 12:22 a.m.•40 views

Weak Random Number Generator

php is vulnerable to weak random number generator. The vulnerability exists as it was discovered that PHP did not properly seed its pseudo-random number generator used by functions such as rand and mtrand, possibly allowing an attacker to easily predict the generated pseudo-random values...

9.8CVSS2.3AI score0.04289EPSS
SaveExploits1References32Affected Software14
Rows per page
Query Builder