Lucene search
K

76 matches found

Circl
Circl
added 2026/05/12 1:33 p.m.11 views

CVE-2026-7616

creationtimestamp| type| source ---|---|--- 2026-05-12 13:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlnvnmaz2s2s...

4.3CVSS5.8AI score0.00128EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7616

Malware in sbrugna...

9.8CVSS9.2AI score0.01513EPSS
Exploits0References3
OSV
OSV
added 2025/08/11 9:15 p.m.6 views

CVE-2025-40920

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. Data::UUID does not use a strong cryptographic source for generating UUIDs. Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable...

8.6CVSS6.4AI score0.00388EPSS
Exploits0References7
OSV
OSV
added 2025/08/11 9:15 p.m.2 views

DEBIAN-CVE-2025-40920

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. Data::UUID does not use a strong cryptographic source for generating UUIDs. Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable...

8.6CVSS5.2AI score0.00388EPSS
Exploits0References1
OSV
OSV
added 2025/08/11 9:15 p.m.1 views

UBUNTU-CVE-2025-40920

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. Data::UUID does not use a strong cryptographic source for generating UUIDs. Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable...

8.6CVSS5.8AI score0.00388EPSS
Exploits0References4
CVE
CVE
added 2025/08/11 8:19 p.m.31 views

CVE-2025-40920

CVE-2025-40920 affects Catalyst::Authentication::Credential::HTTP (Perl) up to version 1.018, where nonces are generated via Data::UUID, which uses a non-cryptographic source and yields v3 UUIDs. Fedora advisories (FEDORA-2025-6df5ab0b98 and FEDORA-2025-d72429a1f8) indicate the patch upgrades the...

8.6CVSS6AI score0.00388EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/08/11 8:19 p.m.8 views

CVE-2025-40920 Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. Data::UUID does not use a strong cryptographic source for generating UUIDs. Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable...

0.00388EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/08/11 8:19 p.m.4 views

CVE-2025-40920

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. Data::UUID does not use a strong cryptographic source for generating UUIDs. Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable...

8.6CVSS5.2AI score0.00388EPSS
Exploits0
Circl
Circl
added 2025/08/01 3:49 p.m.6 views

RHSA-2023:7616

creationtimestamp| type| source ---|---|--- 2025-08-01 15:49:22+00:00| seen| Telegram/vqMv-pw9KY3Z5TMAkCKFJ81O0KEk3Kk9SHClQG6teUoaj50 2025-08-02 14:50:53+00:00| seen| Telegram/O48YTDst3MKwqXTmoA7eKUU-Al4YKF5xmz2EhGo0DjbdKvM 2025-08-02 17:49:06+00:00| seen|...

4.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/16 3:59 p.m.14 views

CVE-2025-7616

A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthreadconddestroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used...

5.5CVSS7.1AI score0.00382EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:43 a.m.6 views

CVE-2024-7616

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this...

9.8CVSS7.4AI score0.0472EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-7616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensiti...

5.5CVSS6.2AI score0.00413EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/08/08 11:0 p.m.31 views

CVE-2024-7616 Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this...

5.5CVSS0.0472EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/08/08 11:0 p.m.16 views

CVE-2024-7616 Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this issue is the function cgiFormString of the file ipcamcgi. The manipulation of the argument host leads to command injection. NOTE: The vendor was contacted early about this...

5.5CVSS7.4AI score0.0472EPSS
Exploits0References5
F5 Networks
F5 Networks
added 2023/02/21 6:52 p.m.46 views

K08478022: Linux kernel vulnerability CVE-2017-7616

Security Advisory Description Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation...

5.5CVSS5.5AI score0.00413EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-3406-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.02041EPSS
Exploits0References2
NVD
NVD
added 2022/08/08 7:15 p.m.14 views

CVE-2021-41615

websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the secret-data guideline for HTTP Digest Access Authentication in RFC 7616 section 3.3 or RFC 2617 section 3.2.1. NOTE:...

9.8CVSS0.01067EPSS
Exploits0References2
Prion
Prion
added 2022/08/08 7:15 p.m.19 views

Hardcoded credentials

websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the secret-data guideline for HTTP Digest Access Authentication in RFC 7616 section 3.3 or RFC 2617 section 3.2.1. NOTE:...

7.5CVSS9.5AI score0.01067EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/08/08 6:26 p.m.73 views

CVE-2021-41615

The CVE-2021-41615 entry relates to GoAhead WebServer 2.1.8 (websda.c) having insufficient nonce entropy because nonce calculation uses a hardcoded value (onceuponatimeinparadise) that does not comply with RFC 7616/2617 secret-data guidelines. The vulnerability is documented with a high CVSS v3.1...

9.8CVSS9.4AI score0.01067EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/08 6:26 p.m.25 views

CVE-2021-41615

websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the secret-data guideline for HTTP Digest Access Authentication in RFC 7616 section 3.3 or RFC 2617 section 3.2.1. NOTE:...

9.8AI score0.01067EPSS
Exploits0References2
Rows per page
Query Builder