Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1Solstice::Session versions through 1440 for Perl generates session ids insecurely.Apr 13, 2026
- Medium5.3Ado::Sessions versions through 0.935 for Perl generates insecure session ids.Apr 8, 2026
- Medium5.3Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id.Apr 8, 2026
- Medium6.3Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_res, inet_db modules) allows DNS Cache Poisoning.Apr 7, 2026
- Medium6.2IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.Apr 7, 2026
- Critical9.8HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids.Mar 28, 2026
- Critical9.8Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.Mar 28, 2026
- Medium5.8A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, l…Mar 16, 2026
- Critical9.1Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id.Mar 5, 2026
- Critical9.8Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely.Mar 5, 2026
- Medium6.5HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.Feb 27, 2026
- High8.2Apache::SessionX versions through 2.01 for Perl create insecure session id.Feb 27, 2026
- High7.7Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an u…Feb 20, 2026
13 records · page 1 of 1
PreviousNext