Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.7AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random sourceOct 8, 2026
- Critical9.1Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.May 20, 2026
- Critical9.3Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…May 15, 2026
- Medium6.5Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids.May 15, 2026
- Medium5.3Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys.May 11, 2026
- Medium6.5WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely.May 11, 2026
- High7.5Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.May 8, 2026
- High8.7RELATE is a web-based courseware package.May 7, 2026
- Medium5.9Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely.Apr 30, 2026
- High7.5Values produced by ${random.value} are not suitable for use as secrets.Apr 28, 2026
- High8.2SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initia…Apr 27, 2026
- High7.5CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.Apr 23, 2026
- High7.5Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts.Apr 15, 2026
- Critical9.1Solstice::Session versions through 1440 for Perl generates session ids insecurely.Apr 13, 2026
- Medium5.3Ado::Sessions versions through 0.935 for Perl generates insecure session ids.Apr 8, 2026
- Medium5.3Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id.Apr 8, 2026
- Critical9.8Cloudreve is a self-hosted file management and sharing system.Apr 3, 2026
- Medium6.7An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0.Apr 1, 2026
- High7.5PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely.Mar 31, 2026
- Critical9.1Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key.Mar 31, 2026
- Critical9.8HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids.Mar 28, 2026
- Critical9.8Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.Mar 28, 2026
- Critical9.3Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and ge…Mar 23, 2026
- Critical9.1Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator.Mar 5, 2026
- Critical9.1Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id.Mar 5, 2026
30 records · page 1 of 2
PreviousNext