#cwe-341

共收录 10 条相关情报。

← 返回所有主题

漏洞预警2026-09-22 发布INFO

Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorizatio...

CVE-2026-94456

Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-330 #cwe-338 #cwe-341

安全公告2026-09-22 发布INFO

Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

CVE-2026-94456

Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-330 #cwe-338 #cwe-341

漏洞预警2026-09-10 发布INFO

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scann...

CVE-2026-87913

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-283 #cwe-341

漏洞预警2026-09-10 发布INFO

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private so...

CVE-2026-87912

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-283 #cwe-341

安全公告2026-08-23 发布INFO

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session...

CVE-2026-19565

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-341

漏洞预警2026-08-23 发布INFO

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAut...

CVE-2026-19565

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock

历史摘要 · 未重新核验 · NVD

#cve #cwe-341

漏洞预警2026-08-18 发布INFO

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to pr...

CVE-2026-15571

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity

历史摘要 · 未重新核验 · NVD

#cve #cwe-341

漏洞预警2026-06-03 发布INFO

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with t...

CVE-2026-36609

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change

历史摘要 · 未重新核验 · NVD

#cve #cwe-327 #cwe-341

安全公告2026-05-04 发布INFO

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision...

CVE-2026-42365

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-341 #severity:high

漏洞预警2026-05-04 发布INFO

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an ...

CVE-2026-42365

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-341