SUSE CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

Debian: Security Advisory (DLA-4100-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4100-1] libdata-entropy-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4100-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2025 https://wiki.debian.org/LTS -...

Debian dla-4100 : libdata-entropy-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4100 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4100-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2025-1860

creationtimestamp| type| source ---|---|--- 2025-03-28 01:26:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9246 2025-03-28 03:31:51+00:00| seen| https://t.me/cvedetector/21356...

CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

CVE-2025-1860 Data::Entropy for Perl uses insecure rand() function for cryptographic functions

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

CVE-2025-1860

CVE-2025-1860 concerns Data::Entropy for Perl (versions 0.007 and earlier) which used Perl’s rand() as the default entropy source for cryptographic functions, not cryptographically secure. Connected advisories confirm vendor security updates across multiple distributions: Mageia reports a fix in ...

CVE-2025-1860 Data::Entropy for Perl uses insecure rand() function for cryptographic functions

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

Linux Distros Unpatched Vulnerability : CVE-2015-1860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of...

CVE-2020-27864

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP...

CVE-2020-27865

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uhttpd service, which listens on T...

CVE-2020-15631

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03HOTFIX WiFi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

HPESBHF04706 rev.2 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01103, 2024.3 IPU - Intel Processor RAPL Interface Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to v2.2008-07-2024 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to v2.2008-07-2024 U46 ROM Family HPE StoreEasy 1670 Expanded Storage...

HPESBHF04695 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to v2.2008-07-2024 HPE StoreEasy 1860 Storage - Prior to v2.2008-07-2024 HPE StoreEasy 1670 Storage - Prior to v2.2005-27-2024 HPE StoreEasy...

RHEL 6 / 7 : rh-redis32-redis (RHSA-2019:1860)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1860 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists,...

CVE-2024-1860

creationtimestamp| type| source ---|---|--- 2024-02-28 11:31:32+00:00| seen| https://t.me/ctinow/195341 2024-02-28 11:31:36+00:00| seen| https://t.me/ctinow/195345 2025-02-14 10:04:00+00:00| seen| Telegram/LcwWE0U1muxSvfG50ezeJOUHgYnWkxL4WuRv2geKp9lcTkkh 2025-04-22 16:03:38+00:00|...

CVE-2024-1860 Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.51 - Missing Authorization to Unauthenticated IP Address Whitelist

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihackeraddwhitelist function in all versions up to, and including, 4.51. This makes it...