https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:23:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288369 EUVD-2026-288369 https://cve.radiocsirt.org/vuln/euvd-2026-288369 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5083 <p>Ado::Sessions versions through 0.935 for Perl generates insecure session ids.</p> <p>The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.</p> <p>Ado::Sessions versions through 0.935 for Perl generates insecure session ids.</p> <p>The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5083 https://cve.radiocsirt.org/vuln/ghsa-3vcr-g3hm-2qr2 <p>Ado::Sessions versions through 0.935 for Perl generates insecure session ids.</p> <p>The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.</p> <p>Ado::Sessions versions through 0.935 for Perl generates insecure session ids.</p> <p>The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.</p> https://cve.radiocsirt.org/vuln/ghsa-3vcr-g3hm-2qr2