#cwe-331

共收录 32 条相关情报。

← 返回所有主题
漏洞预警2026-06-25 发布INFO

SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). ...

CVE-2026-4930

SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptogra

历史摘要 · 未重新核验 · NVD

安全公告2026-05-21 发布INFO

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated...

CVE-2026-46473

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in r

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-21 发布INFO

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for sec...

CVE-2026-46473

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in r

历史摘要 · 未重新核验 · NVD

安全公告2026-05-16 发布INFO

Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using...

CVE-2026-8700

Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand fun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布MEDIUM

Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security u...

CVE-2026-8700

CVE-2026-8700 影响 Perl 的 Crypt::DSA 模块,版本低于 1.20。该模块在生成 DSA 签名所需的随机种子时,使用了 Perl 内置的 rand 函数。Perl 的 rand 函数基于线性同余生成器,不是密码学

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated...

CVE-2026-46474

Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in ran

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for secur...

CVE-2026-46474

Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in ran

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of back...

CVE-2026-42155

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Commun

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently...

CVE-2025-14972

* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted b...

CVE-2025-14972

* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\...

CVE-2026-7210

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allow

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs

CVE-2026-42155

Affected Version: OpenMage LTS ≤ 20.16.0 (confirmed on `20.16.0`) Affected File: `https://github.com/OpenMage/magento-l

历史摘要 · 未重新核验 · GitHub Advisory