391 matches found
CVE-2024-58040
Crypt::RandomEncryption for Perl version 0.01 uses insecure rand function during encryption...
CVE-2024-58040
Crypt::RandomEncryption for Perl version 0.01 uses insecure rand function during encryption...
PT-2025-39923
Name of the Vulnerable Software and Affected Versions Crypt::RandomEncryption for Perl version 0.01 Description The Crypt::RandomEncryption Perl module version 0.01 utilizes an insecure rand function during encryption processes. This can compromise the security of encrypted data. Recommendations ...
Linux Distros Unpatched Vulnerability : CVE-2025-27551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program...
Linux Distros Unpatched Vulnerability : CVE-2021-34146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing...
Linux Distros Unpatched Vulnerability : CVE-2020-25576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the randcore crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints. CVE-2020-25576...
Linux Distros Unpatched Vulnerability : CVE-2021-27378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the randcore crate before 0.6.2 for Rust. Because readu32into and readu64into mishandle certain buffer-length checks, a random number...
Malicious code in @zalastax/nolb-rand2 (npm)
The package @zalastax/nolb-rand2 was found to contain malicious code...
Malicious code in @zalastax/nolb-rand6 (npm)
The package @zalastax/nolb-rand6 was found to contain malicious code...
Malicious code in @zalastax/nolb-rand_ (npm)
The package @zalastax/nolb-rand was found to contain malicious code...
Malicious code in @zalastax/nolb-rand- (npm)
The package @zalastax/nolb-rand- was found to contain malicious code...
Malicious code in @zalastax/nolb-rand (npm)
The package @zalastax/nolb-rand was found to contain malicious code...
MAL-2025-13536 Malicious code in @zalastax/nolb-rand- (npm)
The package @zalastax/nolb-rand- was found to contain malicious code...
MAL-2025-13535 Malicious code in @zalastax/nolb-rand (npm)
The package @zalastax/nolb-rand was found to contain malicious code...
MAL-2025-13543 Malicious code in @zalastax/nolb-rand_ (npm)
The package @zalastax/nolb-rand was found to contain malicious code...
FreeBSD : p5-Crypt-CBC -- Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (cd7f969e-6cb4-11f0-97c4-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cd7f969e-6cb4-11f0-97c4-40b034429ecf advisory. Lib-Crypt-CBC project reports: Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand...
Use of Predictable Algorithm in Random Number Generator
Overview Affected versions of this package are vulnerable to Use of Predictable Algorithm in Random Number Generator via the RANDpoll function. An attacker can obtain predictable random values by invoking RANDbytes after a fork operation in affected applications. This is only exploitable if the...
PT-2025-30102
Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description The OpenSSL compatibility layer implementation had an issue with the RAND poll function, potentially leading to predictable values returned from RAND bytes after a fork call. This could resul...
The vulnerability of the `rand()` function in the Perl programming language, which allows attackers to circumvent existing security restrictions
The vulnerability of the rand function in the Perl programming language is related to the use of a insecure program for generating random numbers. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
AZL-65541 CVE-2025-40918 affecting package perl-Authen-SASL 2.16-21
Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce client nonce is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, i...