Lucene search
+L

26 matches found

OSV
OSV
•added 2026/03/26 3:16 a.m.•18 views

UBUNTU-CVE-2014-125112

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when...

9.8CVSS6.4AI score0.0083EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•0 views

CVE-2014-125112: Reliance on Cookies without Validation and Integrity Checking

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when...

9.8CVSS6.6AI score0.0083EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/05 3:31 a.m.•17 views

EUVD-2025-208296

Plack::Middleware::Session::Simple versions through 0.04 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be...

9.8CVSS5.9AI score0.00433EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•2 views

CVE-2025-40926: Generation of Predictable Numbers or Identifiers

Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be...

9.8CVSS5.8AI score0.00433EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/17 9:27 a.m.•16 views

CVE-2013-10031

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability ...

7.5CVSS6.4AI score0.00291EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/11 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2013-10031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks CVE-2013-10031 Note that Nessus relies on the presence of the...

5.6AI score0.00291EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/09 3:31 a.m.•18 views

EUVD-2013-7289

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

6.3AI score0.00291EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/09 1:16 a.m.•16 views

DEBIAN-CVE-2013-10031

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

7.5CVSS5.2AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/09 1:16 a.m.•15 views

CVE-2013-10031

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

7.5CVSS0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 12:12 a.m.•33 views

CVE-2013-10031

Versions of Plack-Middleware-Session prior to 0.17 are vulnerable to HMAC comparison timing attacks . This vulnerability exists in the session library for Plack (Perl). No specific exploit information is provided, and while some distribution sources indicate a lack of a vendor-supplied patch, it ...

6.5AI score0.00291EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/09 12:12 a.m.•8 views

CVE-2013-10031 Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

6.5AI score0.00291EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/12/09 12:12 a.m.•17 views

CVE-2013-10031

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

5.2AI score0.00291EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•12 views

Plack::Middleware::Session 安全漏洞

Plack::Middleware::Session is a Plack open source minimalist session library for Plack. A security vulnerability exists in Plack::Middleware::Session versions prior to 0.17, which stems from vulnerability to HMAC comparison timing attacks...

7.5CVSS6.4AI score0.00291EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•1 views

CVE-2013-10031: Incorrect Comparison Logic Granularity

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

7.5CVSS5.7AI score0.00291EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•15 views

PT-2025-49686

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

6.8AI score0.00291EPSS
SaveExploits0References2
Fedora
Fedora
•added 2025/09/16 1:15 a.m.•10 views

[SECURITY] Fedora 42 Update: perl-Plack-Middleware-Session-0.36-1.fc42

This is a Plack Middleware component for session management. By default it will use cookies to keep session state and store data in memory. This distribution also comes with other state and store solutions...

6.9AI score0.00342EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-40923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the...

5.9AI score0.00342EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/07/16 11:22 p.m.•10 views

SUSE CVE-2025-40923

Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if i...

7.3CVSS7AI score0.00342EPSS
SaveExploits0References3
OSV
OSV
•added 2025/07/16 1:15 p.m.•6 views

DEBIAN-CVE-2025-40923

Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if i...

7.3CVSS5.3AI score0.00342EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/16 1:15 p.m.•15 views

CVE-2025-40923

Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if i...

7.3CVSS0.00342EPSS
SaveExploits0References5
Rows per page
Query Builder