https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:36:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-290859 EUVD-2026-290859 https://cve.radiocsirt.org/vuln/euvd-2026-290859 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5085 <p>Solstice::Session versions through 1440 for Perl generates session ids insecurely.</p> <p>The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand() function and the process id.</p> <p>The same method is used in the _generateID method in Solstice::Subsession, which is part of the same distribution.</p> <p>The epoch time may be guessed, if it is not leaked in the HTTP Date header. Stringified hash refences will contain predictable content. The built-in rand() function is seeded by 16-bits and is unsuitable for security purposes. The process id comes from a small set of numbers.</p> <p>Predictable session ids could allow an attacker to gain access to systems.</p> <p>Solstice::Session versions through 1440 for Perl generates session ids insecurely.</p> <p>The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand() function and the process id.</p> <p>The same method is used in the _generateID method in Solstice::Subsession, which is part of the same distribution.</p> <p>The epoch time may be guessed, if it is not leaked in the HTTP Date header. Stringified hash refences will contain predictable content. The built-in rand() function is seeded by 16-bits and is unsuitable for security purposes. The process id comes from a small set of numbers.</p> <p>Predictable session ids could allow an attacker to gain access to systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5085 https://cve.radiocsirt.org/vuln/ghsa-4g94-jfqp-p4f7 <p>Solstice::Session versions through 1440 for Perl generates session ids insecurely.</p> <p>The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand() function and the process id.</p> <p>The same method is used in the _generateID method in Solstice::Subsession, which is part of the same distribution.</p> <p>The epoch time may be guessed, if it is not leaked in the HTTP Date header. Stringified hash refences will contain predictable content. The built-in rand() function is seeded by 16-bits and is unsuitable for security purposes. The process id comes from a small set of numbers.</p> <p>Predictable session ids could allow an attacker to gain access to systems.</p> <p>Solstice::Session versions through 1440 for Perl generates session ids insecurely.</p> <p>The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand() function and the process id.</p> <p>The same method is used in the _generateID method in Solstice::Subsession, which is part of the same distribution.</p> <p>The epoch time may be guessed, if it is not leaked in the HTTP Date header. Stringified hash refences will contain predictable content. The built-in rand() function is seeded by 16-bits and is unsuitable for security purposes. The process id comes from a small set of numbers.</p> <p>Predictable session ids could allow an attacker to gain access to systems.</p> https://cve.radiocsirt.org/vuln/ghsa-4g94-jfqp-p4f7