Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-2720

Malware in sbrugna...

5CVSS7.3AI score0.02404EPSS
Exploits0References11
SUSE CVE
SUSE CVE
added 2025/07/28 11:34 p.m.1 views

SUSE CVE-2024-47188

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker...

7.5CVSS6.8AI score0.00283EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.1 views

Suricata 安全特征问题漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security signature issue vulnerability exists in Suricata versions prior to 7.0.7, which stems from a lack of initialization of the "thash" random seed, which results in byte range tracking with...

7.5CVSS6.3AI score0.00283EPSS
Exploits0References5
OSV
OSV
added 2023/07/03 9:15 p.m.3 views

CVE-2023-36610

​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successful...

5.9CVSS5.8AI score0.0041EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.2 views

SUSE CVE-2007-2727

The mcryptcreateiv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls phprandr with an uninitialized seed variable and therefore always generates the same initialization vector IV, which might allow context-dependent attackers to decrypt...

2.6CVSS7.1AI score0.01845EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.2 views

SUSE CVE-2007-2728

The soap extension in PHP calls phprandr with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcryptcreateiv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue...

5CVSS7AI score0.02404EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2007/05/16 10:30 p.m.26 views

CVE-2007-2728

The soap extension in PHP calls phprandr with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcryptcreateiv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue...

5CVSS6AI score0.02404EPSS
Exploits0References2
Prion
Prion
added 2007/05/16 10:30 p.m.21 views

Sql injection

The soap extension in PHP calls phprandr with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcryptcreateiv issue covered by CVE-2007-2727...

5CVSS6.5AI score0.02404EPSS
Exploits1References9Affected Software1
NVD
NVD
added 2007/05/16 10:30 p.m.24 views

CVE-2007-2728

The soap extension in PHP calls phprandr with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcryptcreateiv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue...

5CVSS6.4AI score0.02404EPSS
Exploits0References9
Vulnrichment
Vulnrichment
added 2007/05/16 10:0 p.m.23 views

CVE-2007-2728

The soap extension in PHP calls phprandr with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcryptcreateiv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue...

6.9AI score0.02404EPSS
Exploits0References9
Cvelist
Cvelist
added 2007/05/16 10:0 p.m.28 views

CVE-2007-2728

The soap extension in PHP calls phprandr with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcryptcreateiv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue...

7.5AI score0.02404EPSS
Exploits0References9
CVE
CVE
added 2007/05/16 10:0 p.m.89 views

CVE-2007-2728

CVE-2007-2728 concerns the PHP soap extension calling php_rand_r with an uninitialized seed variable. The impact and attack vectors are not clearly defined in the provided documents; it is noted as related to CVE-2007-2727 and the PHP team argued it is not a valid security issue. No exploitation ...

5CVSS6.3AI score0.02404EPSS
Exploits0References9Affected Software1
Positive Technologies
Positive Technologies
added 2007/05/16 12:0 a.m.3 views

PT-2007-4043 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 4.4.7 PHP versions 5.0.x and earlier PHP versions prior to 5.2.1 Description: The issue affects the encryption process, making it easier for attackers to decrypt certain data due to guessable encryption keys. This is...

2.6CVSS7.7AI score0.01845EPSS
Exploits1References14
Rows per page
Query Builder