Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/04/08 5:53 a.m.•46 views

CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

0.00521EPSS
SaveExploits0References3
OSV
OSV
•added 2026/04/08 5:53 a.m.•14 views

CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

5.3CVSS5.8AI score
SaveExploits0References8
CVE
CVE
•added 2026/04/08 5:53 a.m.•31 views

CVE-2026-5083

The Ado::Sessions Perl module (versions through 0.935 ) generates insecure session IDs , which could allow an attacker to gain unauthorized access to systems. The root cause is that session IDs are generated from a SHA-1 hash seeded with the built-in rand function, the epoch time , and the proces...

5.3CVSS5.8AI score0.00521EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•20 views

PT-2026-31088

Name of the Vulnerable Software and Affected Versions Ado::Sessions versions through 0.935 Description The Ado::Sessions Perl module generates insecure session IDs. The session ID is created using a SHA-1 hash seeded with the built-in rand function, the epoch time, and the process ID PID. The PID...

5.3CVSS5.8AI score0.00521EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•16 views

Ado::Sessions 安全漏洞

Ado::Sessions is a lightweight Perl-based web application development framework developed by. Versions of Ado::Sessions prior to 0.935 contained security vulnerabilities; these vulnerabilities stemmed from the generation of insecure session IDs, which could lead to session hijacking...

5.3CVSS5.8AI score0.00521EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•1 views

CVE-2026-5083: Generation of Predictable Numbers or Identifiers

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

5.3CVSS5.7AI score0.00521EPSS
SaveExploits0References4
Rows per page
Query Builder