CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
A kind of CWE-330 Use of Insufficiently Random Values.
From the CWE List. © The MITRE Corporation.
Newest
- inextrix astppAn issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config...7.5 High
- miekg-dns project miekg-dnsmiekg/dns insecurely generates random numbers5.9 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Weak PRNG5.3 Medium
- call-cc chickenA casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to...5.3 Medium
- dash10 oauth serverThe oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.9.8 Critical
- pac4jUse of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml4.9 Medium
- apereo central authentication serviceUse of Insufficiently Random Values in Apereo CAS8.1 High
- jhipster, jhipster kotlin +1 moreJHipster Kotlin using insecure source of randomness `RandomStringUtils` before v1.2.09.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Weak PRNG7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Cryptographic Flaw5.3 Medium
- revive adserver, revive-adserver revive adserver +1 moreUse of cryptographically weak PRNG in the password recovery token generation of Revive Adserver <...8.1 High
generate-passwordnpmCryptographically Weak PRNG in generate-passwordNo score- matrix sydent, synapse +1 morematrix-sydent and matrix-synapse Use Cryptographically Weak PRNG7.5 High
- ratpack project ratpackUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Ratpack3.7 Low
- pivotal cloud foundry credhub service brokerCredHub Service Broker uses guessable client secret8.1 High
- ruletkaioA gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a...7.5 High
- greedy599 greedy 599A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a...7.5 High
- cryptosagaThe random() function of the smart contract implementation for CryptoSaga, an Ethereum game,...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +29 more +31 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU...6.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650,...7.5 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +34 more +36 moreIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650,...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +25 more +27 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU...7.5 High
- lucky9 lucky9ioThe fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum...7.5 High
- theethereumlottery the ethereum lotteryThe "PayWinner" function of a simplelottery smart contract implementation for The Ethereum...7.5 High
- lightbend akkaCryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor9.1 Critical
- all-for-one all for oneThe maxRandom function of a smart contract implementation for All For One, an Ethereum gambling...7.5 High
- mycryptochampThe randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game,...5.9 Medium
- cryptogsThe endCoinFlip function and throwSlammer function of the smart contract implementations for...7.5 High
- 1000guess 1000 guessThe _addguess function of a simplelottery smart contract implementation for 1000 Guess, an...7.5 High
- randomatic project randomatic, hackerone react-native-meteor-oauth node module +1 moreCryptographically Weak PRNG in randomatic5.3 Medium
- qtpassIt was discovered that QtPass before 1.2.1, when using the built-in password generator, generates...9.8 Critical
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs...7.3 High
- gnu gccUnder certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler...4.0 Medium
- bitcoin** DISPUTED ** The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology...7.5 High
- cagintranetworks getsimple cmsPoor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3...8.8 High
- dlink dwr-932b firmwareAn issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time...7.5 High
- wordpresswp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not...7.5 High
- oleumtech sensor wireless i/o modules, wio dh2 wireless gateway, sensor wireless i\/o module +2 moreOleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator7.8
- apache syncopeApache Syncope uses a weak PNRG5.0 Medium
- qnap ts-239 pro firmware, ts-639 pro firmware +1 moreThe QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the...5.5 Medium
- linux kernel, canonical ubuntu linux, opensuse +2 more +4 moreThe get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces...5.5 Medium
- iomega storcenter pro firmwarecgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows...9.8 Critical
- openssl, canonical ubuntu linux, debian linux +2 moreOpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random...7.5 High