55 matches found
CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...
DEBIAN-CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...
UBUNTU-CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...
PT-2025-4478 · Unknown +1 · Net::Oauth +1
Name of the Vulnerable Software and Affected Versions: Net::OAuth versions prior to 0.29 Description: The default nonce in Net::OAuth::Client is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong. This weakness can be exploited due to the use of a...
CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...
CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...
MetaCPAN Net::OAuth 安全漏洞
MetaCPAN Net::OAuth is a package from the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN Net::OAuth, which stems from the fact that the default nonce is a 32-bit integer generated by the built-in rand function, which is not cryptographically strong...
CVE-2025-22376
Net::OAuth::Client in the Perl Net::OAuth package before 0.29 uses a 32-bit nonce generated from rand(), not cryptographically strong, risking nonce predictability in OAuth flows. Affected: Perl Net-OAuth
CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...
CVE-2024-51987
Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. HTTP Clients created by AddUserAccessTokenHttpClient may use a different user's access token after a token refresh occurs. This occurs because a refreshed token will be captur...
Fedora Core 11 FEDORA-2009-10539 (perl-Net-OAuth)
The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10539. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...
Fedora Core 10 FEDORA-2009-10520 (perl-Net-OAuth)
The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10520. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...
Fedora Core 10 FEDORA-2009-10520 (perl-Net-OAuth)
The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10520. OpenVAS Vulnerability Test $Id: fcore200910520.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10520 perl-Net-OAuth Authors: Thomas Reinke Copyright:...
Fedora 11 : perl-Net-OAuth-0.19-1.fc11 (2009-10539)
A session fixation vulnerability was discovered in OAuth protocol 1.0. Perl OAuth bindings were updated to support the new version of the OAauth protocol that was issued to address the vulnerability. All OAuth users are strongly advised to update to this updated package and protocol version 1.0a...
[SECURITY] Fedora 11 Update: perl-Net-OAuth-0.19-1.fc11
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...