Vulnerabilidades de DRSTEVE

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de DRSTEVE: 2 registro(s), com severidade, exploração e correções.

Crypt::Password 2

Somente exploradas (KEV) →

CVE-2026-6656 Alta · 7.5 CWE-208 20/07/2026

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash.

CVE-2026-16235 Crítica · 9.8 CWE-338 20/07/2026

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.