CVE-2018-18531

text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...

CVE-2025-40933

The Perl module Apache::AuthAny::Cookie versions 0.201 and earlier is vulnerable to insecure session ID generation. The root cause is the use of an MD5 hash of the epoch time combined with the built-in rand function , which is unsuitable for cryptographic purposes. Because the epoch time may be g...