CWE-330

High likelihood

Use of Insufficiently Random Values

Parent: CWE-693 - Protection Mechanism Failure

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

375 vulnerabilities with CWE-330
CVE-2020-11551 HIGH
NETGEAR Orbi Tri-Band Business WiFi - Unauthenticated RCE
CVSS 8.8
CVE-2020-12858 HIGH
COVIDSafe <1.0.16 - Info Disclosure
CVSS 7.5
CVE-2020-5408 MEDIUM
Spring Security <5.3.2, 5.2.x <5.2.4, 5.1.x <5.1.10, 5.0.x <5.0.16,...
CVSS 6.5
CVE-2020-9502 CRITICAL
Dahua Firmware < 2019-12 - Session ID Predictability
CVSS 9.8
CVE-2020-8792 MEDIUM
OKLOK 3.1.1 - Information Exposure via Predictable Barcode Pattern
CVSS 5.3
CVE-2020-12270 MEDIUM
Bluezone 1.0.0 - Use of Insufficiently Random Values in Bluetooth Scan IDs
CVSS 6.5
CVE-2020-11877 HIGH
Zoom Client for Meetings <4.6.11 - Info Disclosure
CVSS 7.5
CVE-2020-1759 MEDIUM
Red Hat Ceph Storage 4-Red Hat Openshift Container Storage 4.2 - Co...
CVSS 6.4
CVE-2020-11585 MEDIUM
Dnnsoftware Dotnetnuke - Information Disclosure
CVSS 4.3
CVE-2020-11501 HIGH
GnuTLS <3.6.13 - Cryptographic Error
CVSS 7.4
CVE-2020-10870 MEDIUM
zim < 0.72.1 - Denial of Service via Predictable Temporary Directory Names
CVSS 5.5
CVE-2020-1731 CRITICAL
Keycloak Operator <8.0.2 - Info Disclosure
CVSS 9.1
CVE-2020-9449 HIGH
BlaB! AX, BlaB! AX Pro, BlaB! WS - Privilege Escalation
CVSS 8.8
CVE-2020-8988 MEDIUM
Voatz app <2020-01-01 - Info Disclosure
CVSS 5.9
CVE-2020-8631 MEDIUM
cloud-init < 19.4 - Use of Insufficiently Random Values in Password Generation
CVSS 5.5
CVE-2020-2099 HIGH
Jenkins <2.213-<2.204.1 - Info Disclosure
CVSS 8.6
CVE-2020-7241 HIGH
WP Database Backup <5.5 - Info Disclosure
CVSS 7.5
CVE-2020-0644 HIGH
Microsoft Windows - Privilege Escalation
CVSS 7.8
CVE-2019-25089 LOW
Morgawr Muon <0.2.0-indev - Insufficiently Random Values
CVSS 3.1
CVE-2019-20494 LOW
cPanel 77.9999.110-81.9999.999 - Use of Insufficiently Random Values in Cpanel::Rand::Get
CVSS 3.3
CVE-2019-19135 HIGH
OPC Foundation OPC UA .NET Standard <1.4.359.31 - Info Disclosure
CVSS 7.4
CVE-2019-9102 HIGH
Moxa MB3170 MB3270 MB3180 MB3280 MB3480 MB3660 Firmware - CSRF Protection Bypass via Predictable Token
CVSS 8.8
CVE-2019-12434 MEDIUM
GitLab 10.6-11.11 - Information Disclosure via Issue Link URL Contrast
CVSS 4.3
CVE-2019-2317 CRITICAL
Snapdragon Auto-SDM632 - Info Disclosure
CVSS 9.8
CVE-2019-18282 MEDIUM
Linux kernel <5.3.10 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities 375
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits