1605 matches found
Insecure Token Generation
github.com/henrylee2cn/faygo is vulnerable to insecure token generation. The library uses math/rand for its generation of random numbers which are not considered cryptographically safe...
EulerOS 2.0 SP1 : libgcrypt (EulerOS-SA-2016-1081)
According to the version of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker able to obtain the first 580 bytes of the PRNG output...
USN-3260-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, obtain sensitive information, spoof the addressbar contents or other UI elements, escape the sandbox to...
Huawei WS318 Design Vulnerability
Huawei WS318 is a wireless router product from Huawei China. A security vulnerability exists in Huawei WS318 V100R001C01B022 and prior versions, which stems from insufficient randomness in the random number generator RNG in the vendor solution used by the product. The vulnerability can be exploit...
CVE-2014-9690
Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator RNG used in the supplier's solution is not random enough. As a result, brute force cracking the...
CVE-2014-9690
CVE-2014-9690 affects Huawei WS318 home gateways (software versions including V100R001C01B022 and earlier). The underlying issue is an insufficiently random RNG used by the vendor’s WPS implementation, enabling offline PIN brute-forcing. Exploitation allows an attacker to crack the WPS PIN and ga...
The vulnerability of the Flash Player software platform, which allows attackers to compromise the confidentiality of information
The vulnerability of the Flash Player software platform’s random number generators is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information...
Adobe Flash Player Within Google Chrome Security Update (APSB17-07) - Linux
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...
Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4014329)
This host is missing a critical security update according to Microsoft Bulletin MS17-023. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : Flash Player -- multiple vulnerabilities (4ffb633c-0a3b-11e7-a9f2-0011d823eebd)
Adobe reports : - These updates resolve a buffer overflow vulnerability that could lead to code execution CVE-2017-2997. - These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2017-2998, CVE-2017-2999. - These updates resolve a random number generator...
SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:0703-1)
This update for flash-player fixes the following issues: Security update to 25.0.0.127 bsc1029374, fixing the following vulnerabilities advised under APSB17-07 : - CVE-2017-2997: This update resolves a buffer overflow vulnerability that could lead to code execution. - CVE-2017-2998, CVE-2017-2999...
flash-plugin: multiple code execution issues fixed in APSB17-07
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...
[ASA-201703-12] lib32-flashplugin: multiple issues
Arch Linux Security Advisory ASA-201703-12 ========================================== Severity: Critical Date : 2017-03-15 CVE-ID : CVE-2017-2997 CVE-2017-2998 CVE-2017-2999 CVE-2017-3000 CVE-2017-3001 CVE-2017-3002 CVE-2017-3003 Package : lib32-flashplugin Type : multiple issues Remote : Yes Lin...
Adobe Flash Player Security Updates (APSB17-07) - Mac OS X
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
CVE-2017-3000
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...
CVE-2017-3000
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...
CVE-2017-3000
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...
Information disclosure
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...
CVE-2017-3000
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...