CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

WordPress plugin Users manager – PN 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-28810

Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...

The vulnerability of the secure_seq() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the secureseq function in the Linux operating system’s kernel is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-25726

CVE-2026-25726 (Cloudreve) : Prior to 4.13.0, Cloudreve uses the weak Go PRNG math/rand seeded with time.Now().UnixNano() to generate critical secrets (secret_key, hash_id_salt) stored in the DB. An attacker can fetch the administrator account creation time via public APIs, brute-force the PRNG s...

CVE-2026-5087

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails for example, on systems without the device, such as Windows, then it...

CVE-2026-5087 PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails for example, on systems without the device, such as Windows, then it...

CVE-2026-5087 PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails for example, on systems without the device, such as Windows, then it...

CVE-2026-5087 PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails for example, on systems without the device, such as Windows, then it...

Predictable UUID Generation

github.com/gofiber/utils is vulnerable to predictable UUID generation.The vulnerability is due to fallback to predictable UUID values when crypto/rand.Read fails, which allows an attacker to guess UUIDs and exploit security-critical operations relying on them...

CVE-2025-15604

Amon2 versions before 6.17 for Perl use an insecure randomstring implementation for security functions. In versions 6.06 through 6.16, the randomstring function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 has...

CVE-2025-15604

Amon2 versions before 6.17 for Perl use an insecure randomstring implementation for security functions. In versions 6.06 through 6.16, the randomstring function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 has...

CVE-2026-3256

HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids. HTTP::Session defaults to using HTTP::Session::ID::SHA1 to generate session ids using a SHA-1 hash seeded with the built-in rand function, the high resolution epoch time, and the PID. The PID will come...

CVE-2025-15604 Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions

Amon2 versions before 6.17 for Perl use an insecure randomstring implementation for security functions. In versions 6.06 through 6.16, the randomstring function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 has...

PT-2026-28276

Name of the Vulnerable Software and Affected Versions Amon2 versions prior to 6.17 Description Amon2 for Perl utilizes an insecure random string implementation in its security functions. Versions 6.06 through 6.16 attempt to use /dev/urandom, but fall back to a SHA-1 hash seeded with the built-in...

The vulnerability of the `bitmap_ip_create()` function in the `net/netfilter/ipset/ip_set_bitmap_ip.c` module of the `netfilter` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bitmapipcreate function in the net/netfilter/ipset/ipsetbitmapip.c module of the netfilter component in the Linux operating system’s kernel is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the tegra_eqos_probe() function in the drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tegraeqosprobe function in the drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could...

The vulnerability of the paging64_cmpxchg_gpte() function in the arch/x86/kvm/mmu/paging_tmpl.h subsystem of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.

The vulnerability of the paging64cmpxchggpte function in the arch/x86/kvm/mmu/pagingtmpl.h subsystem of the virtualization subsystem on the Linux x86 kernel platform is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and using Nextcloud data storage, relates to the use of insufficiently random values. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the...