[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2008-2108":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":38,"duplicate_of":9,"upstream":39,"downstream":40,"duplicates":53,"related":54,"reserved_at":9,"published_at":55,"modified_at":56,"state":57,"summary":58,"references_raw":66,"kevs":202,"epss":203,"epss_history":206,"metrics":458,"affected":467},"CVE-2008-2108","The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-331","Insufficient Entropy","The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-59","Session Credential Falsification through Prediction",[],[24,33],{"_key":25,"name":26,"source":27,"url":28,"maturity":29,"reliability_score":30,"verified":31,"type":9,"platforms":32,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_D2FFCAE7532DFE20","Exploit Reference (archives.neohapsis.com)","reference","http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html","unknown",0.2,false,[],{"_key":34,"name":35,"source":27,"url":36,"maturity":29,"reliability_score":30,"verified":31,"type":9,"platforms":37,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_77D2869120A868C8","Exploit Reference (sektioneins.de)","http://www.sektioneins.de/advisories/SE-2008-02.txt",[],[],[],[41,43,45,47,49,51],{"_key":42},"RHSA-2008:0505",{"_key":44},"RHSA-2008:0544",{"_key":46},"RHSA-2008:0545",{"_key":48},"RHSA-2008:0546",{"_key":50},"RHSA-2008:0582",{"_key":52},"DSA-1789-1",[],[],"2008-05-07T21:00:00.000Z","2024-08-07T08:49:57.790Z","Modified",{"cisa_kev":31,"cisa_ransomware":31,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":57},"low",0.05607,"critical",9.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[67,75,82,87,92,97,101,105,110,115,119,124,128,134,138,142,146,150,154,158,162,166,170,176,180,184,189,193,197],{"url":68,"sources":69,"tags":71},"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html",[70,64],"cve.org",[72,73,74],"Vendor Advisory","X Refsource FEDORA","Mailing List",{"url":76,"sources":77,"tags":78},"http://secunia.com/advisories/32746",[70,64],[79,80,81],"Third Party Advisory","X Refsource SECUNIA","Broken Link",{"url":28,"sources":83,"tags":84},[70,64],[74,85,81,86],"X Refsource FULLDISC","Exploit",{"url":88,"sources":89,"tags":90},"http://security.gentoo.org/glsa/glsa-200811-05.xml",[70,64],[72,91,79],"X Refsource GENTOO",{"url":93,"sources":94,"tags":95},"http://www.redhat.com/support/errata/RHSA-2008-0546.html",[70,64],[72,96,81],"X Refsource REDHAT",{"url":98,"sources":99,"tags":100},"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html",[70,64],[72,73,74],{"url":102,"sources":103,"tags":104},"http://secunia.com/advisories/30828",[70,64],[79,80,81],{"url":106,"sources":107,"tags":108},"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128",[70,64],[72,109,81],"X Refsource MANDRIVA",{"url":111,"sources":112,"tags":113},"http://securityreason.com/securityalert/3859",[70,64],[79,114,74],"X Refsource SREASON",{"url":116,"sources":117,"tags":118},"http://www.redhat.com/support/errata/RHSA-2008-0582.html",[70,64],[72,96,81],{"url":120,"sources":121,"tags":122},"http://www.ubuntu.com/usn/usn-628-1",[70,64],[72,123,79],"X Refsource UBUNTU",{"url":125,"sources":126,"tags":127},"http://www.redhat.com/support/errata/RHSA-2008-0545.html",[70,64],[72,96,81],{"url":129,"sources":130,"tags":131},"https://exchange.xforce.ibmcloud.com/vulnerabilities/42226",[70,64],[132,133,79],"VDB Entry","X Refsource XF",{"url":135,"sources":136,"tags":137},"http://secunia.com/advisories/31124",[70,64],[79,80,81],{"url":139,"sources":140,"tags":141},"http://secunia.com/advisories/31119",[70,64],[79,80,81],{"url":143,"sources":144,"tags":145},"http://www.mandriva.com/security/advisories?name=MDVSA-2008:129",[70,64],[72,109,81],{"url":147,"sources":148,"tags":149},"http://secunia.com/advisories/31200",[70,64],[79,80,81],{"url":151,"sources":152,"tags":153},"http://secunia.com/advisories/30757",[70,64],[79,80,81],{"url":155,"sources":156,"tags":157},"http://www.redhat.com/support/errata/RHSA-2008-0544.html",[70,64],[72,96,81],{"url":159,"sources":160,"tags":161},"http://secunia.com/advisories/35003",[70,64],[79,80,81],{"url":163,"sources":164,"tags":165},"http://www.mandriva.com/security/advisories?name=MDVSA-2008:125",[70,64],[72,109,81],{"url":167,"sources":168,"tags":169},"http://www.redhat.com/support/errata/RHSA-2008-0505.html",[70,64],[72,96,81],{"url":171,"sources":172,"tags":173},"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10844",[70,64],[132,174,175,81],"Signature","X Refsource OVAL",{"url":177,"sources":178,"tags":179},"http://www.mandriva.com/security/advisories?name=MDVSA-2008:130",[70,64],[72,109,81],{"url":181,"sources":182,"tags":183},"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126",[70,64],[72,109,81],{"url":185,"sources":186,"tags":187},"http://www.securityfocus.com/archive/1/491683/100/0/threaded",[70,64],[74,188,81,79,132],"X Refsource BUGTRAQ",{"url":190,"sources":191,"tags":192},"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127",[70,64],[72,109,81],{"url":36,"sources":194,"tags":195},[70,64],[196,81,86],"X Refsource MISC",{"url":198,"sources":199,"tags":200},"http://www.debian.org/security/2009/dsa-1789",[70,64],[72,201,74],"X Refsource DEBIAN",[],{"date":204,"score":60,"percentile":205},"2026-06-04",0.90481,[207,211,214,217,219,222,225,228,230,233,236,239,242,244,246,249,252,255,258,261,264,266,269,272,275,278,281,284,287,290,293,295,297,300,302,304,307,310,313,316,319,322,325,328,331,334,337,339,342,345,348,351,354,357,361,364,367,370,373,376,379,382,384,387,390,393,396,399,402,404,406,408,410,413,416,418,420,422,425,427,430,433,436,439,442,445,448,450,453,455],{"date":208,"score":209,"percentile":210},"2025-11-04",0.04738,0.88906,{"date":212,"score":209,"percentile":213},"2025-11-05",0.88904,{"date":215,"score":209,"percentile":216},"2025-11-06",0.88897,{"date":218,"score":209,"percentile":213},"2025-11-07",{"date":220,"score":209,"percentile":221},"2025-11-08",0.88908,{"date":223,"score":209,"percentile":224},"2025-11-09",0.88905,{"date":226,"score":209,"percentile":227},"2025-11-10",0.88901,{"date":229,"score":209,"percentile":213},"2025-11-11",{"date":231,"score":209,"percentile":232},"2025-11-12",0.88911,{"date":234,"score":209,"percentile":235},"2025-11-13",0.88916,{"date":237,"score":209,"percentile":238},"2025-11-14",0.88918,{"date":240,"score":209,"percentile":241},"2025-11-15",0.88914,{"date":243,"score":209,"percentile":238},"2025-11-16",{"date":245,"score":209,"percentile":241},"2025-11-17",{"date":247,"score":209,"percentile":248},"2025-11-18",0.8833,{"date":250,"score":209,"percentile":251},"2025-11-19",0.88333,{"date":253,"score":209,"percentile":254},"2025-11-20",0.88336,{"date":256,"score":209,"percentile":257},"2025-11-21",0.88929,{"date":259,"score":209,"percentile":260},"2025-11-22",0.8893,{"date":262,"score":209,"percentile":263},"2025-11-23",0.88928,{"date":265,"score":209,"percentile":260},"2025-11-24",{"date":267,"score":209,"percentile":268},"2025-11-25",0.88933,{"date":270,"score":209,"percentile":271},"2025-11-26",0.88931,{"date":273,"score":209,"percentile":274},"2025-11-27",0.88934,{"date":276,"score":209,"percentile":277},"2025-11-28",0.88926,{"date":279,"score":209,"percentile":280},"2025-11-29",0.88996,{"date":282,"score":209,"percentile":283},"2025-11-30",0.88993,{"date":285,"score":209,"percentile":286},"2025-12-01",0.89049,{"date":288,"score":209,"percentile":289},"2025-12-02",0.89051,{"date":291,"score":209,"percentile":292},"2025-12-03",0.8905,{"date":294,"score":209,"percentile":283},"2025-12-04",{"date":296,"score":209,"percentile":283},"2025-12-05",{"date":298,"score":209,"percentile":299},"2025-12-06",0.88992,{"date":301,"score":209,"percentile":299},"2025-12-07",{"date":303,"score":209,"percentile":299},"2025-12-08",{"date":305,"score":209,"percentile":306},"2025-12-09",0.88999,{"date":308,"score":60,"percentile":309},"2025-12-10",0.8998,{"date":311,"score":60,"percentile":312},"2025-12-11",0.89984,{"date":314,"score":60,"percentile":315},"2025-12-12",0.89989,{"date":317,"score":60,"percentile":318},"2025-12-13",0.89992,{"date":320,"score":60,"percentile":321},"2025-12-14",0.89993,{"date":323,"score":60,"percentile":324},"2025-12-15",0.89994,{"date":326,"score":60,"percentile":327},"2025-12-16",0.89988,{"date":329,"score":60,"percentile":330},"2025-12-17",0.89997,{"date":332,"score":60,"percentile":333},"2025-12-18",0.90004,{"date":335,"score":60,"percentile":336},"2025-12-19",0.90005,{"date":338,"score":60,"percentile":333},"2025-12-20",{"date":340,"score":60,"percentile":341},"2025-12-21",0.90013,{"date":343,"score":60,"percentile":344},"2025-12-22",0.90014,{"date":346,"score":60,"percentile":347},"2025-12-23",0.90016,{"date":349,"score":60,"percentile":350},"2025-12-24",0.90021,{"date":352,"score":60,"percentile":353},"2025-12-25",0.90034,{"date":355,"score":60,"percentile":356},"2025-12-26",0.90032,{"date":358,"score":359,"percentile":360},"2025-12-27",0.05915,0.90353,{"date":362,"score":60,"percentile":363},"2025-12-28",0.90028,{"date":365,"score":60,"percentile":366},"2025-12-29",0.90024,{"date":368,"score":60,"percentile":369},"2025-12-30",0.9003,{"date":371,"score":60,"percentile":372},"2025-12-31",0.90039,{"date":374,"score":60,"percentile":375},"2026-01-01",0.90106,{"date":377,"score":60,"percentile":378},"2026-01-02",0.90101,{"date":380,"score":60,"percentile":381},"2026-01-03",0.90099,{"date":383,"score":60,"percentile":372},"2026-01-04",{"date":385,"score":60,"percentile":386},"2026-01-05",0.90036,{"date":388,"score":60,"percentile":389},"2026-01-06",0.90037,{"date":391,"score":60,"percentile":392},"2026-01-07",0.9004,{"date":394,"score":60,"percentile":395},"2026-01-08",0.90044,{"date":397,"score":60,"percentile":398},"2026-01-09",0.90045,{"date":400,"score":60,"percentile":401},"2026-01-10",0.90046,{"date":403,"score":60,"percentile":389},"2026-01-11",{"date":405,"score":60,"percentile":386},"2026-01-12",{"date":407,"score":60,"percentile":356},"2026-01-13",{"date":409,"score":60,"percentile":401},"2026-01-14",{"date":411,"score":60,"percentile":412},"2026-01-15",0.90051,{"date":414,"score":60,"percentile":415},"2026-01-16",0.90054,{"date":417,"score":60,"percentile":412},"2026-01-17",{"date":419,"score":60,"percentile":412},"2026-01-18",{"date":421,"score":60,"percentile":412},"2026-01-19",{"date":423,"score":60,"percentile":424},"2026-01-20",0.90052,{"date":426,"score":60,"percentile":415},"2026-01-21",{"date":428,"score":60,"percentile":429},"2026-01-22",0.90058,{"date":431,"score":60,"percentile":432},"2026-01-23",0.90066,{"date":434,"score":60,"percentile":435},"2026-01-24",0.90073,{"date":437,"score":60,"percentile":438},"2026-01-25",0.90072,{"date":440,"score":60,"percentile":441},"2026-01-26",0.90075,{"date":443,"score":60,"percentile":444},"2026-01-27",0.90078,{"date":446,"score":60,"percentile":447},"2026-01-28",0.90084,{"date":449,"score":60,"percentile":447},"2026-01-29",{"date":451,"score":60,"percentile":452},"2026-01-30",0.90083,{"date":454,"score":60,"percentile":447},"2026-01-31",{"date":456,"score":60,"percentile":457},"2026-02-01",0.9015,[459],{"source":64,"cvss_v2_0":460,"cvss_v3_0":9,"cvss_v3_1":465,"cvss_v4_0":9},{"baseScore":461,"baseSeverity":9,"vectorString":462,"impactScore":463,"exploitabilityScore":464},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,10,{"baseScore":62,"baseSeverity":466,"vectorString":65,"impactScore":62,"exploitabilityScore":464},"CRITICAL",[468,483,490,498],{"ecosystem":9,"name":469,"vendor":470,"product":471,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":473},"ubuntu linux","canonical","ubuntu_linux","o",[474,477,479,481],{"version":475,"is_range":31,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.06","cpe",{"version":478,"is_range":31,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.04",{"version":480,"is_range":31,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.10",{"version":482,"is_range":31,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.04",{"ecosystem":9,"name":484,"vendor":485,"product":486,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":487},"debian linux","debian","debian_linux",[488],{"version":489,"is_range":31,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.0",{"ecosystem":9,"name":491,"vendor":492,"product":491,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":493},"fedora","fedoraproject",[494,496],{"version":495,"is_range":31,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8",{"version":497,"is_range":31,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9",{"ecosystem":9,"name":499,"vendor":9,"product":499,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":500},"PHP",[501,508],{"version":502,"is_range":503,"range_type":476,"version_start":504,"version_start_type":505,"version_end":506,"version_end_type":507,"fixed_in":9},"gte4.0.0_lt4.4.8",true,"4.0.0","including","4.4.8","excluding",{"version":509,"is_range":503,"range_type":476,"version_start":510,"version_start_type":505,"version_end":511,"version_end_type":507,"fixed_in":9},"gte5.0.0_lt5.2.5","5.0.0","5.2.5"]