CWE-330

High likelihood

Use of Insufficiently Random Values

Parent: CWE-693 - Protection Mechanism Failure

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

381 vulnerabilities with CWE-330
CVE-2024-35292 HIGH
SIMATIC S7-200 SMART CPU - Info Disclosure
CVSS 8.2
CVE-2024-5149 MEDIUM
BuddyForms <= 2.8.9 - Unauthenticated Email Verification Bypass via Insufficiently Random Activation Code
CVSS 6.5
CVE-2024-36389 CRITICAL
MileSight DeviceHub - Authentication Bypass via Insufficiently Random Values
CVSS 9.8
CVE-2024-4185 HIGH
Customer Email Verification for WooCommerce <2.7.4 - Auth Bypass
CVSS 8.1
CVE-2024-28013 MEDIUM
NEC Corporation Various Products - Insufficiently Random Values
CVSS 5.3
CVE-2024-1631 CRITICAL
Ed25519KeyIdentity - Insecure Seed Generation
CVSS 9.1
CVE-2024-21495 MEDIUM
github.com/greenpau/caddy-security <1.0.42 - Info Disclosure
CVSS 6.5
CVE-2024-0761 HIGH
WordPress File Manager <7.2.1 - Info Disclosure
CVSS 8.1
CVE-2024-23688 MEDIUM
Consensys Discovery <0.4.5 - Info Disclosure
CVSS 5.3
CVE-2023-6799 MEDIUM
WP Reset < 2.0 - Unauthenticated Sensitive Information Exposure via Insufficiently Random Snapshot Names
CVSS 5.9
CVE-2023-46740 MEDIUM
CubeFS <3.3.1 - Privilege Escalation
CVSS 6.5
CVE-2023-32831 MEDIUM
MediaTek Software Development Kit < 7.6.7.1 - Local Information Disclosure via WLAN Driver PIN Crack
CVSS 5.5
CVE-2023-4462 LOW
Poly Trio and CCX Devices - Information Disclosure via Weak Random Values
CVSS 3.7
CVE-2023-6376 MEDIUM
Henschen & Associates - Info Disclosure
CVSS 5.3
CVE-2023-48056 HIGH
PyPinkSign v0.5.1 - Info Disclosure
CVSS 7.5
CVE-2023-29332 HIGH
Microsoft Azure Kubernetes Service - Privilege Escalation
CVSS 7.5
CVE-2023-41879 HIGH
OpenMage Magento < 19.5.1 - Unauthenticated Order Access via Weak Protect Code
CVSS 7.5
CVE-2023-34353 HIGH
OAS Platform 18.00.0072 - Authentication Bypass via Network Traffic Sniffing
CVSS 7.5
CVE-2023-39979 CRITICAL
MXsecurity < 1.1.0 - Authentication Bypass via Insufficient Random Values
CVSS 9.8
CVE-2023-4344 CRITICAL
Broadcom RAID Controller - Info Disclosure
CVSS 9.8
CVE-2023-24478 MEDIUM
Intel Quartus Prime Pro <22.4 - Info Disclosure
CVSS 5.5
CVE-2023-3373 MEDIUM
Mitsubishi Electric GOT2000/GOT SIMPLE <01.49.000 - Session Hijack/DoS
CVSS 5.9
CVE-2023-26451 HIGH
OAuth Authorization Service - Info Disclosure
CVSS 7.5
CVE-2023-3247 LOW
PHP <8.0.29, <8.1.20, <8.2.7 - Info Disclosure
CVSS 2.6
CVE-2023-3803 LOW
Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 - In...
CVSS 2.6
Details
Vulnerabilities 381
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits