Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
added 2025/04/07 4:48 p.m.20 views

CVE-2024-57835

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

5.5CVSS6.9AI score0.00264EPSS
Exploits0References1
Circl
Circl
added 2025/04/05 4:39 p.m.7 views

CVE-2024-57835

creationtimestamp| type| source ---|---|--- 2025-04-05 16:39:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10606 2025-04-05 17:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm3g5j35yc2u 2025-04-05 19:05:42+00:00| seen| https://t.me/cvedetector/22194...

5.5CVSS4.8AI score0.00264EPSS
Exploits0References3
NVD
NVD
added 2025/04/05 4:15 p.m.15 views

CVE-2024-57835

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

5.5CVSS0.00264EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/04/05 4:11 p.m.9 views

CVE-2024-57835 Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

6.5AI score0.00264EPSS
Exploits0References4
CVE
CVE
added 2025/04/05 4:11 p.m.67 views

CVE-2024-57835

CVE-2024-57835 affects Amon2::Auth::Site::LINE, which uses String::Random to generate nonces. The underlying issue is that String::Random relies on Perl’s built-in rand(), a non-cryptographically secure RNG, potentially enabling nonce-related weaknesses. Technical details across connected docs in...

5.5CVSS6.6AI score0.00264EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/04/05 4:11 p.m.6 views

CVE-2024-57835 Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

5.5CVSS5.9AI score0.00264EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/04/05 4:11 p.m.26 views

CVE-2024-57835 Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

0.00264EPSS
Exploits0References4
Rows per page
Query Builder