Lucene search
+L

3 matches found

OSV
OSV
added 2025/03/26 11:15 a.m.11 views

UBUNTU-CVE-2025-27552

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS5.8AI score0.00116EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/01/24 9:59 a.m.20 views

php: Password_verify() always return true with some hash

A vulnerability was found in PHP. This security flaw occurs when malformatted BCrypt hashes that include a $ within their salt part trigger a buffer overread and may erroneously validate any password as valid...

8.1CVSS7.4AI score0.00947EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2023/10/19 1:33 p.m.6 views

php: Password_verify() always return true with some hash

A vulnerability was found in PHP. This security flaw occurs when malformatted BCrypt hashes that include a $ within their salt part trigger a buffer overread and may erroneously validate any password as valid...

8.1CVSS7.4AI score0.00947EPSS
SaveExploits1References5
Rows per page
Query Builder