Lucene search
K

3045 matches found

OSV
OSV
added 2026/05/08 6:16 p.m.3 views

UBUNTU-CVE-2026-6659

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography...

7.5CVSS5.8AI score0.00015EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/08 5:17 p.m.6 views

CVE-2026-6659

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography...

7.5CVSS5.8AI score0.00015EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/08 5:17 p.m.30 views

CVE-2026-6659 Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography...

0.00015EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/05/08 10:54 a.m.4 views

CVE-2026-40973

A flaw was found in Spring Boot. A local attacker on the same host as the application may be able to take control of the ApplicationTemp directory due to predictable temporary directory handling. When the server.servlet.session.persistent setting is enabled and the attack persists across...

7CVSS6.1AI score0.00009EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.6 views

PT-2026-39185

Name of the Vulnerable Software and Affected Versions Crypt::PasswdMD5 versions prior to 1.43 Description The software generates insecure random values for salts because the built-in rand function is predictable and unsuitable for cryptographic purposes. Recommendations Update to a version later...

7.5CVSS5.8AI score0.00015EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.5 views

Crypt::PasswdMD5 安全特征问题漏洞

Crypt::PasswdMD5 is a Perl module developed by RSAVAGE’s individual developers, which implements MD5-based password hashing calculations. Versions of Crypt::PasswdMD5 prior to 1.42 contained security vulnerabilities due to the use of a predictable built-in rand function to generate insecure rando...

7.5CVSS5.8AI score0.00015EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/08 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-39819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The go bug command writes to two files with predictable names in the system temporary directory for example, /tmp. An attacker with access to the temporary...

5.3CVSS5.6AI score0.00009EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/07 9:30 p.m.5 views

EUVD-2026-28422

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.8AI score0.00009EPSS
Exploits0References5
NVD
NVD
added 2026/05/07 8:16 p.m.8 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS0.00009EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/05/07 8:16 p.m.4 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS5.8AI score0.00009EPSS
Exploits0References7
OSV
OSV
added 2026/05/07 8:16 p.m.2 views

UBUNTU-CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS5.8AI score0.00009EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/05/07 7:41 p.m.8 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.8AI score0.00009EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/07 7:41 p.m.5 views

CVE-2026-39819 Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.8AI score0.00009EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/07 7:41 p.m.24 views

CVE-2026-39819 Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

0.00009EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2026/05/07 7:41 p.m.10 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS5.8AI score0.00009EPSS
Exploits0
CVE
CVE
added 2026/05/07 7:41 p.m.21 views

CVE-2026-39819

CVE-2026-39819 concerns the Go tool (go bug). The vulnerability arises when the command writes to two files with predictable names in the system temporary directory (e.g., /tmp). An attacker with access to the temporary directory can create a symlink in one of these names, causing the go bug proc...

5.3CVSS5.8AI score0.00009EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2026/05/07 7:41 p.m.5 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS5.8AI score0.00009EPSS
Exploits0
OSV
OSV
added 2026/05/07 4:17 p.m.5 views

JLSEC-2026-465 Mbed TLS may use a low entropy PRNG seed

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator PRNG...

6.7CVSS5.8AI score0.00015EPSS
Exploits0References6
NVD
NVD
added 2026/05/07 3:16 p.m.11 views

CVE-2026-41505

RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's makesigninkey function and exam.py's genticketcode function. This issue has been patched via commit 2f68e16...

8.7CVSS0.00052EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/07 1:35 p.m.5 views

EUVD-2026-28379

RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's makesigninkey function and exam.py's genticketcode function. This issue has been patched via commit 2f68e16...

8.7CVSS5.7AI score0.00052EPSS
Exploits0References2
Rows per page
Query Builder