Lucene search
K

11 matches found

SUSE CVE
SUSE CVE
added 2026/03/05 6:55 a.m.0 views

SUSE CVE-2025-66630

Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure randomness cannot be obtained. Because no error is returned by the Fiber v2 UUID functions, application code may...

9.4CVSS5.8AI score0.0002EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/16 9:25 p.m.1 views

CVE-2026-2439 Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids

Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids. The generatesessionid function in Concierge::Sessions::Base defaults to using the uuidgen command to generate a UUID, with a fallback to using Perl's built-in rand function. Neither of these methods are...

5.7AI score0.0007EPSS
Exploits0References5
CVE
CVE
added 2026/02/09 6:4 p.m.6 views

CVE-2025-66630

Fiber is a Go web framework. Before 2.52.11 and on Go

9.4CVSS5.6AI score0.0002EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 7:33 a.m.7 views

CVE-2024-22194

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

2.8CVSS6.4AI score0.00031EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:38 p.m.8 views

CVE-2022-36045

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

9.8CVSS6.9AI score0.00712EPSS
Exploits0
Veracode
Veracode
added 2024/05/30 8:28 a.m.9 views

Use Of Cryptographically Weak Pseudo-Random Number Generator

stormpath/sdk is vulnerable to Use Of Cryptographically Weak Pseudo-Random Number Generator. This vulnerability is due to an insecure generation of UUID version 4...

7.1AI score
Exploits0
Fedora
Fedora
added 2024/03/28 1:25 a.m.21 views

[SECURITY] Fedora 39 Update: perl-Data-UUID-1.227-1.fc39

This module provides a framework for generating v3 UUIDs Universally Unique Identifiers, also known as GUIDs Globally Unique Identifiers. A UUID is 128 bits long, and is guaranteed to be different from all other UUIDs/GUIDs generated until 3400 CE. UUIDs were originally used in the Network...

5.5CVSS5.3AI score0.00049EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/03/28 12:0 a.m.22 views

Fedora: Security Advisory (FEDORA-2024-a58a7e2388)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00049EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/09/06 12:0 a.m.0 views

The vulnerability of the utils.generateUUID function in the NodeBB Forum Software allows a violator to elevate their privileges.

The vulnerability of the utilsGenerateUUID function in the NodeBB Forum Software is related to errors in the code for generating pseudo-random numbers for password reset codes. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

9CVSS0.00712EPSS
Exploits0References4Affected Software1
Fedora
Fedora
added 2021/07/25 1:3 a.m.46 views

[SECURITY] Fedora 34 Update: vmod-uuid-1.8-4.fc34

UUID Varnish vmod used to generate a uuid, including versions 1, 3, 4 and 5 as specified in RFC 4122. See the RFC for details about the various versions...

6.5CVSS6.7AI score0.00957EPSS
Exploits0
NVD
NVD
added 2019/05/03 1:29 p.m.14 views

CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

5.9CVSS5.6AI score0.00316EPSS
Exploits0References1
Rows per page
Query Builder