CWE-330: Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- sick media serverPoor quality of randomness in authorization tokens3.1 Low
- empoweringprowebsite psw front-end login & registrationPSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function9.8 Critical
- project team tmall demo, tmall demo +1 moreTmall Demo Payment Identifier pay random values6.3 Medium
- vllm aibrixvLLM AIBrix Prefix Caching hash.go random values2.1 Low
- sungrowpower isolarcloudSunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt...6.5 Medium
- google fuchsiaIdentifiable Header Values In Fuchsia Leading To Tracking of The User6.9 Medium
- nodejs undiciUndici Uses Insufficiently Random Values6.8 Medium
- pgadmin pgagentpgAgent scheduled batch job scripts are created in a predictable temporary directory potentially allowing a denial of service5.5 Medium
- wpclever wpc shop as a customer for woocommerceWPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key8.1 High
- avahi, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreAvahi: avahi wide-area dns uses constant source port5.3 Medium
- ericsson codecheckercodechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service8.7 High
- cisco adaptive security appliance (asa) software, firepower threat defense software, adaptive security appliance software +1 more +3 moreCisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability6.8 Medium
- oisf suricataSuricata http/byte-ranges: missing hashtable random seed leads to potential DoS7.5 High
- oisf suricataSuricata datasets: missing hashtable random seed leads to potential DoS7.5 High
- canonical jujuJUJU_CONTEXT_ID is a predictable authentication secret8.7 High
- adacore ada web servicesAn issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate...7.5 High
- nissan altima, nissan-global blind spot protection sensor ecu firmware +1 morePredictable seed generation after ECU reset5.3 Medium
- cordea oauthOAuth library for nim allows insecure generation of state values by generateState - entropy too low and uses regular PRNG instead of CSPRNG6.5 Medium
- fiware keyrockArbitrary User Activation6.3 Medium
- fiware keyrockDisabling MFA without Authentication4.3 Medium
- projectsendprojectsend Password Reset Token functions.php generate_random_string random values6.3 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcm8550 firmware +13 more +15 moreUse of Insufficiently Random Values in Core7.1 High
- dell idrac9, integrated dell remote access controller 9, integrated dell remote access controller 9 firmware +2 moreiDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th...7.6 High
- wpweb woocommerce - social login, wpwebelite woocommerce social login +1 moreWooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness6.5 Medium
- siemens simatic s7-200 smart cpu cr40, simatic s7-200 smart cpu cr60, simatic s7-200 smart cpu sr20 +7 more +9 moreA vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All...8.8 High
zendframework/zendframeworkPackagistZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities7.4 High- themekraft buddyforms, svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft post form registration form profile form for user profiles and content forms +2 moreBuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness6.5 Medium
- milesight devicehubMileSight DeviceHub - CWE-330 Use of Insufficiently Random Values9.8 Critical
- wpcodefactory customer email verification for woocommerceCustomer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness8.1 High
- webfactory wp resetWP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness5.9 Medium
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreUse of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3,...5.3 Medium
@nfid/embednpm@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys9.1 Critical- silabs gecko software development kit, silabs.com gsdk +1 moreUninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices6.8 Medium
- dfinity agent-js, icp-js-core +1 moreagent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`9.1 Critical
- greenpau caddy-security, authcrunch caddy security +1 moreUse of Insufficiently Random Values in github.com/greenpau/caddy-security6.5 Medium
- filemanagerpro file managerFile Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames8.1 High
- cubefsInsecure random string generator used for sensitive data6.5 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7612, mt7613, mt7615, mt7622, mt7626, mt7629, mt7915, mt7916, mt7981, mt7986 +1 moreIn wlan driver, there is a possible PIN crack due to use of insufficiently random values. This...5.5 Medium
- hp inc trio 8300, poly ccx 350, ccx 400 +38 more +40 morePoly VVX 601 Web Configuration Application random values3.7 Low
- henschen court document management, henschen & associates court document management software +1 moreHenschen & Associates court document management software cache uses predictable file names5.3 Medium
- bandoche pypinksignPyPinkSign uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption7.5 High
- nettyNetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port6.8 Medium
- microchip mplab network creatorIn Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.9.1 Critical
- capgemini picotcpIn PicoTCP 1.7.0, TCP ISNs are improperly random.9.1 Critical
- contiki-ngIn Contiki 4.5, TCP ISNs are improperly random.9.1 Critical
- butok fnetIn FNET 4.6.3, TCP ISNs are improperly random.9.1 Critical
- oryx-embedded cyclonetcpIn Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.9.8 Critical
- silabs uc\/tcp-ipIn Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.9.8 Critical
- ethernut nut\/osAn issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ...7.5 High
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege Vulnerability7.5 High
- Show moreLoading…