CWE-330

High likelihood

Use of Insufficiently Random Values

Parent: CWE-693 - Protection Mechanism Failure

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

375 vulnerabilities with CWE-330
CVE-2019-9863 CRITICAL
ABUS Secvest FUAA50000 3.01.01 - Info Disclosure
CVSS 9.8
CVE-2019-5420 CRITICAL
Ruby On Rails DoubleTap Development Mode secret_key_base Vulnerability
CVSS 9.8
CVE-2019-9898 CRITICAL
PuTTY < 0.71 - Use of Insufficiently Random Values in Cryptographic Operations
CVSS 9.8
CVE-2019-5885 HIGH
Matrix Synapse <0.34.0.1 - Privilege Escalation
CVSS 7.5
CVE-2019-1543 HIGH
OpenSSL 1.1.0-1.1.0j - Nonce Reuse in ChaCha20-Poly1305
CVSS 7.4
CVE-2019-0729 CRITICAL
Azure IoT Java SDK - Privilege Escalation
CVSS 9.8
CVE-2019-1997 HIGH
Android 7.0-9 - Local Information Disclosure via Insecure Randomness in random_get_bytes
CVSS 7.5
CVE-2019-8919 HIGH
Seafile Android Client <2.2.13 - Info Disclosure
CVSS 7.5
CVE-2019-0007 CRITICAL
Juniper Networks Junos OS <15.1F5 - Info Disclosure
CVSS 9.3
CVE-2018-19441 MEDIUM
Neato Botvac Connected 2.2.0 - Info Disclosure
CVSS 4.7
CVE-2018-18425 MEDIUM
Primeo - Arbitrary Token Minting via doAirdrop Function
CVSS 6.5
CVE-2018-20025 HIGH
CODESYS V3 <3.5.14.0 - Info Disclosure
CVSS 7.5
CVE-2018-18602 CRITICAL
Guardzilla Smart Cameras - Info Disclosure
CVSS 9.8
CVE-2018-17987 HIGH
HashHeroes - Use of Insufficiently Random Values in determineWinner Function
CVSS 7.5
CVE-2018-1279 HIGH
Pivotal RabbitMQ for PCF - Unauthenticated Cluster Takeover via Deterministic Cookie
CVSS 8.5
CVE-2018-19983 MEDIUM
Silabs Z-Wave S0 Firmware - Denial of Service via Continuous Nonce Get Frame Transmission
CVSS 6.5
CVE-2018-18531 CRITICAL
kaptcha 2.3.2 - Use of Insufficiently Random Values in CAPTCHA Generation
CVSS 9.8
CVE-2018-18375 CRITICAL
Orange AirBox Y858_FL_01.16_04 - Info Disclosure
CVSS 9.8
CVE-2018-17888 CRITICAL
NUUO CMS < 3.1 - Remote Code Execution via Session ID Prediction
CVSS 9.8
CVE-2018-16239 CRITICAL
damicms 6.0.1 - Session Hijacking via Predictable Cookie Generation
CVSS 9.8
CVE-2018-15807 HIGH
POSIM EVO 15.13 - Unauthenticated Bypass via Emergency Override Code Prediction
CVSS 7.8
CVE-2018-13280 HIGH
Synology DSM <6.2-23739 - Info Disclosure
CVSS 7.4
CVE-2018-11045 MEDIUM
Pivotal Operations Manager <2.1.6, <2.0.15, <1.12.22 - Info Disclosure
CVSS 5.9
CVE-2018-1108 MEDIUM
kernel drivers <4.17-rc1 - Info Disclosure
CVSS 5.9
CVE-2018-1266 HIGH
Cloudfoundry Capi-release < 1.52.0 - Path Traversal
CVSS 8.1
Details
Vulnerabilities 375
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits