Lucene search
+L

1999 matches found

Positive Technologies
Positive Technologies
added 2025/04/05 12:00 a.m.14 views

PT-2025-15068 · Unknown +1 · Data::Random +1

Name of the Vulnerable Software and Affected Versions: Net::Xero versions 0.044 and earlier Description: The issue concerns the use of the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically, Net::Xero uses the...

6.5CVSS6.4AI score0.00328EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/04/05 12:00 a.m.11 views

PT-2025-15065

Name of the Vulnerable Software and Affected Versions WebService::Xero versions 0.11 and earlier Description The issue concerns the use of a non-cryptographically secure source of entropy for cryptographic functions. Specifically, WebService::Xero uses the Data::Random library, which relies on th...

5.5CVSS6.5AI score0.00281EPSS
SaveExploits0References14
OPENSUSE Linux
OPENSUSE Linux
added 2025/04/03 12:00 a.m.6 views

perl-Data-Entropy-0.8.0-1.1 on GA media (moderate)

perl-Data-Entropy-0.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14960-1 Rating: moderate Cross-References: CVE-2025-1860 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

7.7CVSS7.3AI score0.00179EPSS
SaveExploits0
OSV
OSV
added 2025/04/02 12:00 a.m.5 views

OPENSUSE-SU-2025:14960-1 perl-Data-Entropy-0.8.0-1.1 on GA media

These are all security issues fixed in the perl-Data-Entropy-0.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.7CVSS6.8AI score0.00179EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/04/01 1:44 a.m.8 views

SUSE CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

7.7CVSS5.5AI score0.00179EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2025/04/01 12:00 a.m.13 views

Debian: Security Advisory (DLA-4100-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS5.3AI score0.00179EPSS
SaveExploits0References2
Debian
Debian
added 2025/03/31 12:28 p.m.19 views

[SECURITY] [DLA 4100-1] libdata-entropy-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4100-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2025 https://wiki.debian.org/LTS -...

7.7CVSS6.1AI score0.00179EPSS
SaveExploits0
OSV
OSV
added 2025/03/31 12:00 a.m.11 views

DLA-4100-1 libdata-entropy-perl - security update

Bulletin has no description...

7.7CVSS7.2AI score0.00179EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/31 12:00 a.m.13 views

Debian dla-4100 : libdata-entropy-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4100 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4100-1 [email protected] https://www.debian.org/lts/security/...

7.7CVSS5.7AI score0.00179EPSS
SaveExploits0References4
NVD
NVD
added 2025/03/28 1:15 a.m.26 views

CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

7.7CVSS0.00179EPSS
SaveExploits0References3
OSV
OSV
added 2025/03/28 1:15 a.m.3 views

DEBIAN-CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

7.7CVSS5.6AI score0.00179EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/28 1:15 a.m.20 views

CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

7.2AI score
SaveExploits0References3
OSV
OSV
added 2025/03/28 1:15 a.m.11 views

UBUNTU-CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

7.7CVSS5.8AI score0.00179EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/03/28 12:56 a.m.24 views

CVE-2025-1860 Data::Entropy for Perl uses insecure rand() function for cryptographic functions

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

0.00179EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/28 12:56 a.m.95 views

CVE-2025-1860

CVE-2025-1860 concerns Data::Entropy for Perl (versions 0.007 and earlier) which used Perl’s rand() as the default entropy source for cryptographic functions, not cryptographically secure. Connected advisories confirm vendor security updates across multiple distributions: Mageia reports a fix in ...

7.7CVSS7.1AI score0.00179EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/28 12:56 a.m.10 views

CVE-2025-1860 Data::Entropy for Perl uses insecure rand() function for cryptographic functions

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

7.6AI score0.00179EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/03/28 12:56 a.m.27 views

CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

7.7CVSS5.6AI score0.00179EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/03/28 12:00 a.m.10 views

Perl 安全漏洞

Perl is a general-purpose, interpreted, dynamic cross-platform programming language from the PERL community. A security vulnerability exists in Perl 0.007 and earlier versions that stems from the use of the rand function as the default entropy source for cryptographic functions that are not...

7.7CVSS5.3AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/27 12:00 a.m.11 views

PT-2025-13414

Name of the Vulnerable Software and Affected Versions Data::Entropy versions 0.007 and earlier Description The issue concerns the use of the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Recommendations For Data::Entropy versio...

7.7CVSS5.4AI score0.00179EPSS
SaveExploits0References35
CNVD
CNVD
added 2025/03/17 12:00 a.m.14 views

Logic Flaw Vulnerability in ZKTime Attendance Management System at Entropy Base Technology Co.

Ltd. is a global provider of products and solutions based on "People, Vehicles and Things" access time and security management system. A logic flaw exists in the ZKTime Time and Attendance Management System of Entropy Base Technology, which can be exploited by attackers to obtain sensitive...

6.8AI score
SaveExploits0
Rows per page
Query Builder