Lucene search
+L

6 matches found

SUSE CVE
SUSE CVE
•added 2025/05/08 11:50 a.m.•15 views

SUSE CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

5.3CVSS6.3AI score0.00567EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2025/05/03 11:15 a.m.•23 views

CVE-2024-58135

Mojolicious versions from 7.28 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand function, and...

5.3CVSS6.2AI score0.00567EPSS
SaveExploits1References10
osv_ubuntu
osv_ubuntu
•added 2025/05/03 11:15 a.m.•33 views

UBUNTU-CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

5.3CVSS6.5AI score0.00567EPSS
SaveExploits1References10
Mend
Mend
•added 2025/05/03 10:16 a.m.•11 views

CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

6.9CVSS0.00567EPSS
SaveExploits1References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/03 12:00 a.m.•6 views

CVE-2024-58135: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

5.3CVSS6.4AI score0.00567EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/08/12 12:00 a.m.•8 views

PT-2024-29783

Name of the Vulnerable Software and Affected Versions FIWARE Keyrock versions = 8.4 Description The function generate app certificates in lib/app certificates.js does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create...

9.1CVSS0.00486EPSS
SaveExploits1References9
Rows per page
Query Builder