CWE-330: Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- openmage magento, magento-lts +1 moreMagento LTS's guest order "protect code" can be brute-forced too easily7.5 High
- open automation software oas platformAn authentication bypass vulnerability exists in the OAS Engine authentication functionality of...7.5 High
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Authentication Bypass9.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa), intel raid web console 3 (rwc3) +2 moreBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection9.8 Critical
- intel quartus primeUse of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R...5.5 Medium
- mitsubishi electric corporation got simple series gs21 model, got2000 series gt21 model, mitsubishielectric gs21 firmware +1 more +3 morePredictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation...5.9 Medium
- open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreFunctions with insufficient randomness were used to generate authorization tokens of the...7.5 High
- cdwanjiang flash flood disaster monitoring and warning systemChengdu Flash Flood Disaster Monitoring and Warning System File Name ImageStationDataService.asmx random values2.6 Low
- cisco nx-os system software in aci mode, nx-os +1 moreA vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000...7.4 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 moreUse of insufficiently random values vulnerability in User Management Functionality in Synology...5.9 Medium
- phpMissing error check and insufficient random bytes in HTTP Digest authentication for SOAP2.6 Low
- atlas copco power focus, atlascopco power focus 6000 firmware +1 moreCVE-2023-18989.4 Critical
- crypto-js project crypto-jscrypto-js uses insecure random numbers5.3 Medium
- honeywell onewireless, onewireless network wireless device manager firmware +1 moreInsecure random number used for generating keys for signing Jwt tokens6.2 Medium
- c-ares, fedoraproject fedora +1 moreInsufficient randomness in generation of DNS query IDs in c-ares5.9 Medium
- c-ares, fedoraproject fedora +1 moreAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 Low
- cbot core, panel, chatbot +2 moreInsecure Randomness in CBOT's Chatbot9.8 Critical
- amazon fire tv stick 3rd gen, insignia tv with fireos, amazon fire os +2 moreImproper JPAKE implementation allows offline PIN brute-forcing due to the initialization of...7.1 High
- konghq kongKonga Login API random values3.1 Low
- churchcrmThe hashing algorithm of ChurchCRM v4.5.3 utilizes a non-random salt value which allows attackers...7.5 High
- akuvox e11, e11 firmware +1 moreCVE-2023-03436.5 Medium
- tp-link tl-wr940n, tl-wr940n firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...7.5 High
- abb infinity dc power plant, h5692448 g104 firmware, h5692448 g224l firmware +6 more +8 moreEasily guessable session ID's in NE843 Pulsar Plus Controller6.3 Medium
- combodo itopCombodo iTop's weak password reset token leads to account takeover7.4 High
- netflix lemurInsecure Random Generation in Netflix Lemur7.5 High
- cisco fxos, unified computing system (managed), ucs 6200 firmware +10 more +12 moreCisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability6.3 Medium
- elwsc kasago ipv4, kasago ipv4 light, kasago ipv6\/v4 dual +2 more +4 moreKASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP...9.1 Critical
- ckanCKAN is vulnerable to session secret shared across instances using Docker images8.6 High
- suse rancherRancher: Non-random authentication token7.1 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...5.3 Medium
- inhand networks inrouter 302, inrouter 615, inhandnetworks inrouter302 firmware +1 more +3 moreInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version...10.0 Critical
- rapid7 insightvm, insightvm virtual appliance, nexpose virtual appliance +2 moreRapid7 Nexpose Virtual Appliance Duplicate SSH Host Key7.7 High
- amd 2nd gen epyc, romepi firmware +1 moreA randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key...5.5 Medium
- morgawr muonMorgawr Muon handler.clj random values3.1 Low
- fredsmith utilsfredsmith utils Filename screenshot_sync predictable state2.6 Low
- kapetan dnskapetan dns Request.cs entropy5.6 Medium
- siemens scalance x204rna (hsr), scalance x204rna (prp), scalance x204rna eec (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE...9.8 Critical
- seeddmsWeak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full...9.8 Critical
- unspecified phpservermon, phpservermonitor php server monitor +1 morephpservermon User.php setUserLoggedIn predictable algorithm in random number generator2.6 Low
- unspecified phpservermon, phpservermonitor php server monitor +1 morephpservermon User.php generatePasswordResetToken predictable algorithm in random number generator2.6 Low
- drogondrogon Session Hash small space of random values3.1 Low
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC)...5.3 Medium
- wiesemann & theis at-modem-emulator, com-server ++, com-server 20ma +31 more +33 moreWiesemann & Theis: Small number space for allocating session id in Com-Server family8.8 High
- eclipse deeplearning4jSome Deeplearning4J packages use unclaimed s3 bucket in tests and examples5.3 Medium
- objectfirst ootbiAn issue was discovered in Object First 1.0.7.712. A flaw was found in the Web Service, which...6.5 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq, broadcom rabbitmq server +2 morePredictable credential obfuscation seed value used in rabbitmq-server5.5 Medium
- b2evolutionAn authorization bypass in b2evolution allows remote, unauthenticated attackers to predict...9.1 Critical
- hipcam realserver, iegeek ig20 firmware +1 moreieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used...6.5 Medium
- fastly js-compute, js-compute-runtime +1 moreRandom number seed fixed during compilation7.5 High
- syncoveryAn issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9...9.8 Critical
- Show moreLoading…