CWE-330

High likelihood

Use of Insufficiently Random Values

Parent: CWE-693 - Protection Mechanism Failure

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

375 vulnerabilities with CWE-330
CVE-2024-56089 HIGH
Technitium DNS Server < 13.2.2 - DNS Cache Poisoning via Birthday Attack
CVSS 7.5
CVE-2024-50684 MEDIUM
SunGrow iSolarCloud <V2.1.6.20241017 - Info Disclosure
CVSS 6.5
CVE-2024-10604 MEDIUM
Fuchsia < f16 - Use of Insufficiently Random Values in Network Protocol Header Fields
CVSS 5.3
CVE-2024-12432 HIGH
WPC Shop as a Customer for WooCommerce <1.2.8 - Privilege Escalation
CVSS 8.1
CVE-2024-52615 MEDIUM
Red Hat Enterprise Linux 10 - Use of Insufficiently Random Values in Avahi-daemon DNS Query Port Selection
CVSS 5.3
CVE-2024-10082 HIGH
CodeChecker <6.24.1 - Privilege Escalation
CVSS 8.7
CVE-2024-20331 MEDIUM
Cisco Adaptive Security Appliance Software - Unauthenticated Denial of Service via Session Authentication Handle
CVSS 6.8
CVE-2024-47188 HIGH
Suricata < 7.0.7 - Denial of Service via Predictable Hash Table Behavior
CVSS 7.5
CVE-2024-47187 HIGH
Suricata < 7.0.7 - Predictable Hash Table Behavior via Uninitialized Random Seed
CVSS 7.5
CVE-2024-7558 HIGH
Juju < 2.9.51 - Unauthenticated Predictable Authentication Secret via JUJU_CONTEXT_ID
CVSS 8.7
CVE-2024-41708 HIGH
AdaCore ada_web_services <20.0 - Privilege Escalation
CVSS 7.5
CVE-2024-6348 HIGH
Nissan Altima 2022 - Info Disclosure
CVSS 7.5
CVE-2024-42475 MEDIUM
CORDEA oauth < 0.11 - Insufficient Entropy in OAuth State Parameter
CVSS 6.5
CVE-2024-7659 LOW
projectsend <r1720 - Info Disclosure
CVSS 3.7
CVE-2024-42165 MEDIUM
FIWARE Keyrock <= 8.4 - Info Disclosure
CVSS 6.3
CVE-2024-42164 MEDIUM
FIWARE Keyrock <= 8.4 - Info Disclosure
CVSS 4.3
CVE-2024-21460 HIGH
Qualcomm FastConnect 6900 Firmware - Information Disclosure via ASLR Relocation
CVSS 7.1
CVE-2024-25943 HIGH
iDRAC9 <7.00.00.172-7.10.50.00 - RCE
CVSS 7.6
CVE-2024-5868 MEDIUM
WooCommerce - Social Login <2.6.2 - Auth Bypass
CVSS 6.5
CVE-2024-35292 HIGH
SIMATIC S7-200 SMART CPU - Info Disclosure
CVSS 8.2
CVE-2024-5149 MEDIUM
BuddyForms <= 2.8.9 - Unauthenticated Email Verification Bypass via Insufficiently Random Activation Code
CVSS 6.5
CVE-2024-36389 CRITICAL
MileSight DeviceHub - Authentication Bypass via Insufficiently Random Values
CVSS 9.8
CVE-2024-4185 HIGH
Customer Email Verification for WooCommerce <2.7.4 - Auth Bypass
CVSS 8.1
CVE-2024-28013 MEDIUM
NEC Corporation Various Products - Insufficiently Random Values
CVSS 5.3
CVE-2024-1631 CRITICAL
Ed25519KeyIdentity - Insecure Seed Generation
CVSS 9.1
Details
Vulnerabilities 375
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits