121 matches found
CVE-2025-40926: Generation of Predictable Numbers or Identifiers
Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be...
CVE-2026-3255: Generation of Predictable Numbers or Identifiers
HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand function. The HTTP::Session2 session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epo...
CVE-2024-58041: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Smolder versions through 1.51 for Perl uses insecure rand function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses t...
CVE-2025-15578
Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time which is available from HTTP response headers, a call to the built-in rand function, and the PID...
MetaCPAN WWW::OAuth 安全漏洞
MetaCPAN WWW::OAuth is a Perl authentication library developed by the MetaCPAN Foundation. Versions of MetaCPAN WWW::OAuth 1.000 and earlier contained a security vulnerability. This vulnerability stemmed from using the rand function as the default entropy source for encryption functions, which is...
CVE-2025-40905 WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions
WWW::OAuth 1.000 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...
EUVD-2025-201876
WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword to create passwords using PHP's rand. rand is not cryptographically secure, which allows password sequences to be predicted or brute-forced. This can lead to user account compromise or privilege...
EUVD-2002-1494
Malware in sbrugna...
EUVD-2009-4294
Malware in sbrugna...
EUVD-2024-54366
Malicious code in bioql PyPI...
EUVD-2025-8117
Malicious code in bioql PyPI...
EUVD-2025-7415
Malicious code in bioql PyPI...
EUVD-2024-54369
Malicious code in bioql PyPI...
EUVD-2025-8533
Malicious code in bioql PyPI...
EUVD-2025-10846
Malicious code in bioql PyPI...
EUVD-2025-13365
Malicious code in bioql PyPI...
EUVD-2022-4985
Malicious code in bioql PyPI...
CVE-2024-58040
Crypt::RandomEncryption for Perl version 0.01 uses insecure rand function during encryption...
CVE-2024-58040: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Crypt::RandomEncryption for Perl version 0.01 uses insecure rand function during encryption...
PT-2025-39923
Name of the Vulnerable Software and Affected Versions Crypt::RandomEncryption for Perl version 0.01 Description The Crypt::RandomEncryption Perl module version 0.01 utilizes an insecure rand function during encryption processes. This can compromise the security of encrypted data. Recommendations ...