EUVD-2026-41713

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce a...

EUVD-2025-2763

Malicious code in bioql PyPI...

CVE-2025-22376

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...

CVE-2025-22376

The Net::OAuth package for Perl is vulnerable in versions before 0.29 because the Net::OAuth::Client component generates a default nonce as a 32-bit integer using the built-in rand() function. Because rand() is not cryptographically strong, the nonce lacks sufficient entropy, which could potentia...

CVE-2024-3962

The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppomuploadfile function in all versions up to, and including, 32.0.18. This makes it possible for unauthenticated attackers to upload arbitrary files...

WordPress WP Frontend Profile plugin <= 1.2.1 - Nonce Security Issue vulnerability

Nonce Security Issue vulnerability discovered by Julio Potier in WordPress WP Frontend Profile plugin versions = 1.2.1. Solution Update the WordPress WP Frontend Profile plugin to the latest available version at least 1.2.2...