Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:18:49 +0000 certa-2011-avi-031 — Plusieurs vulnérabilités ont été corrigées dans Bugzilla. L'une d'entre elles permet à un utilisateur de récupérer les… https://cve.radiocsirt.org/vuln/certa-2011-avi-031 certa-2011-avi-031 https://cve.radiocsirt.org/vuln/certa-2011-avi-031 EUVD-2026-120787 https://cve.radiocsirt.org/vuln/euvd-2026-120787 EUVD-2026-120787 https://cve.radiocsirt.org/vuln/euvd-2026-120787 fkie_cve-2010-4568 https://cve.radiocsirt.org/vuln/fkie_cve-2010-4568 <p>Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote attackers to obtain access to arbitrary accounts via unspecified vectors, related to an insufficient number of calls to the srand function.</p> <p>Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote attackers to obtain access to arbitrary accounts via unspecified vectors, related to an insufficient number of calls to the srand function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-4568 GHSA-qrp2-qxjh-p3w7 https://cve.radiocsirt.org/vuln/ghsa-qrp2-qxjh-p3w7 <p>Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote attackers to obtain access to arbitrary accounts via unspecified vectors, related to an insufficient number of calls to the srand function.</p> <p>Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote attackers to obtain access to arbitrary accounts via unspecified vectors, related to an insufficient number of calls to the srand function.</p> https://cve.radiocsirt.org/vuln/ghsa-qrp2-qxjh-p3w7 gsd-2010-4568 https://cve.radiocsirt.org/vuln/gsd-2010-4568 gsd-2010-4568 https://cve.radiocsirt.org/vuln/gsd-2010-4568