Skip to content
OpenAdvisories

Vendor

TOKUHIROM

6 known vulnerabilities.

Products

HTTP::Session2 2 Image::EPEG 1 Amon2 1 UnQLite 1 Amon2::Plugin::Web::CSRFDefender 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-5082

    Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id

    Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id. The generate_session_id function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes using SHA-1…

    TOKUHIROM Amon2::Plugin::Web::CSRFDefender
  • Medium 6.5
    CVE-2018-25160

    HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend

    HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend. For example, if an application uses memcached for session storage, then it may be po…

    TOKUHIROM HTTP::Session2
  • Medium 6.5
    CVE-2026-3255

    HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function

    HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function. The HTTP::Session2 session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come …

    TOKUHIROM HTTP::Session2