#cwe-338

共收录 72 条相关情报。

← 返回所有主题
漏洞预警2026-05-20 发布INFO

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable f...

CVE-2026-47372

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the buil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of back...

CVE-2026-42155

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Commun

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. ...

CVE-2026-8503

Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generat

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default s...

CVE-2026-8503

Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. Amazon::Credentials stores credentials in an obfuscated form to prevent access to the...

CVE-2026-6146

Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. Amazon::Credentials stores c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

WebDyne::Session versions through 2.075 for Perl generates the session id insecurely. The session handler generates the session id from an MD5 hash seeded with a call to the bu...

CVE-2026-5084

WebDyne::Session versions through 2.075 for Perl generates the session id insecurely. The session handler generates the

历史摘要 · 未重新核验 · NVD

安全公告2026-05-08 发布INFO

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The...

CVE-2026-6659

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-08 发布INFO

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography.

CVE-2026-6659

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-07 发布INFO

RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's make_sign_in_key() function and exam.py's ge...

CVE-2026-41505

RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs

CVE-2026-42155

Affected Version: OpenMage LTS ≤ 20.16.0 (confirmed on `20.16.0`) Affected File: `https://github.com/OpenMage/magento-l

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generated from summing the character codepoints of the absolute p...

CVE-2026-5080

Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initialization v...

CVE-2026-40514

SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints t

历史摘要 · 未重新核验 · NVD