135 matches found
Magento 2 Community Edition Weak PRNG
A cryptographically weak pseudo-rando number generator is used in multiple security relevant contexts in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...
GHSA-8V9H-M7PJ-HX7C Magento 2 Community Edition Weak PRNG
A cryptographically weak pseudo-rando number generator is used in multiple security relevant contexts in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...
GHSA-GWF7-VFJF-WF6X matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...
CVE-2021-36171
CVE-2021-36171 affects Fortinet FortiPortal prior to 6.0.6, where the password-reset feature uses a cryptographically weak pseudo‑random number generator. This may let a remote unauthenticated attacker predict parts of or the entire newly generated password within a time window. Documented CVSSv3...
CVE-2021-43799
Zulip is an open-source team collaboration tool. Zulip Server installs RabbitMQ for internal message passing. In versions of Zulip Server prior to 4.9, the initial installation until first reboot, or restart of RabbitMQ does not successfully limit the default ports which RabbitMQ opens; this...
Code injection
In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...
CVE-2021-45489
CVE-2021-45489 refers to NetBSD up to 9.2 where the IPv6 Flow Label generation uses a weak cryptographic PRNG. Affected: NetBSD 9.2 and earlier IP stack behavior related to Flow Label generation. Consequence: potential information leakage or traffic-related exposure described by multiple sources;...
PT-2021-24250 · Netbsd · Netbsd
Name of the Vulnerable Software and Affected Versions: NetBSD versions prior to 9.3 Description: The issue concerns a weak cryptographic PRNG used in the IPv6 fragment ID generation algorithm. Recommendations: For NetBSD versions prior to 9.3, update to version 9.3 or later to resolve the issue...
GHSA-VRGH-5W3C-GGF8 showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
showdoc security feature issue vulnerability
showdoc is open source and a great tool for IT teams to share documents online. showDoc is vulnerable to a security feature issue that stems from the use of an encrypted weak pseudo-random number generator PRNG. No detailed vulnerability details are currently available...
CVE-2021-3990
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
Code injection
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3990
Technical details (affected versions, root cause specifics, and fixes) for CVE-2021-3990 are not publicly available in the provided connected documents. Monitor for updates from vendors and vulnerability databases.
in zmister2016/mrdoc
description Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in Mrdoc allows an attacker to reset arbitrary user‘s password 1、/admin/sendemailvcode/，check email & generate email & send mail def sendemailvcoderequest: if request.method == 'POST': email = request.POST.get'email',No...
GHSA-J85Q-WHC9-G4P9 Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
Palo Alto Networks PAN-OS 8.1.x < 8.1.19 / 9.0.x < 9.0.14 / 9.1.x < 9.1.10 / 10.0.x < 10.0.4 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.19 or 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.10 or 10.0.x prior to 10.0.4. It is, therefore, affected by a vulnerability. - A cryptographically weak pseudo-random number generator PRNG is used during...
