EUVD-2025-209114

Amon2 versions before 6.17 for Perl use an insecure randomstring implementation for security functions. In versions 6.06 through 6.16, the randomstring function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 has...

CVE-2025-15604 Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions

Amon2 versions before 6.17 for Perl use an insecure randomstring implementation for security functions. In versions 6.06 through 6.16, the randomstring function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 has...

CVE-2025-15604: Generation of Predictable Numbers or Identifiers

Amon2 versions before 6.17 for Perl use an insecure randomstring implementation for security functions. In versions 6.06 through 6.16, the randomstring function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 has...

CVE-2024-41708

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString function in the src/core/aws-utils.adb module...

CVE-2024-41708

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString function in the src/core/aws-utils.adb module...

CVE-2024-41708

The Ada Web Server (aws) and AdaCore ada_web_services 20.0 are vulnerable because they do not use a cryptographically secure pseudorandom number generator. Specifically, the AWS.Utils.Random and AWS.Utils.Random_String functions utilized Ada.Numerics.Discrete_Random, which is not designed for cry...

CVE-2024-41708

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString function in the src/core/aws-utils.adb module...

CVE-2024-41708: Use of Insufficiently Random Values

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString function in the src/core/aws-utils.adb module...

Predictable Password Recovery

Moodle is vulnerable to predictable password recovery. The vulnerability exists because of not enough randomization of PHP mtrand function used in randomstring and complexrandomstring functions...

CVE-2015-5267

lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mtrand function to implement the randomstring and complexrandomstring functions, which makes it easier for remote attackers to predict password-recovery tokens via a...