CWE-338
Medium likelihoodUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
184 vulnerabilities with CWE-338
CVE-2018-25107
HIGH
Crypt::Random::Source <0.13 - Info Disclosure
CVSS 7.5
CVE-2018-15795
HIGH
Pivotal CredHub Service Broker <1.1.0 - Info Disclosure
CVSS 8.1
CVE-2018-17968
HIGH
RuletkaIo - Predictable Random Value Generation via Blockchain Timestamp and Hash
CVSS 7.5
CVE-2018-17877
HIGH
Greedy 599 - Predictable Random Value Generation via External Contract Call
CVSS 7.5
CVE-2018-12975
HIGH
CryptoSaga - Predictable Random Number Generation via Public Blockchain Variables
CVSS 7.5
CVE-2018-5871
MEDIUM
Qualcomm Snapdragon Firmware - Use of Cryptographically Weak PRNG in MAC Address Randomization
CVSS 6.5
CVE-2018-5837
HIGH
Qualcomm Snapdragon Firmware - Cryptographically Weak PRNG in MAC Address Randomization
CVSS 7.5
CVE-2018-11291
HIGH
Qualcomm Snapdragon - Use of Cryptographically Weak PRNG in NAN
CVSS 7.5
CVE-2018-11290
HIGH
Qualcomm Snapdragon Firmware - Cryptographically Weak PRNG in MAC Address Randomization
CVSS 7.5
CVE-2018-17071
HIGH
Lucky9io - Predictable Random Number Generation via Public Storage Variable
CVSS 7.5
CVE-2018-15552
HIGH
The Ethereum Lottery - Predictable Random Number Generation in PayWinner Function
CVSS 7.5
CVE-2018-16115
CRITICAL
Lightbend Akka <2.5.16 - Info Disclosure
CVSS 9.1
CVE-2018-12056
HIGH
All For One - Predictable Randomness via Publicly Readable Seed
CVSS 7.5
CVE-2018-12885
MEDIUM
MyCryptoChamp - Predictable Random Value Generation in randMod() Function
CVSS 5.9
CVE-2018-14715
HIGH
cryptogs - Predictable Random Number Generation via Block Hash
CVSS 7.5
CVE-2018-12454
HIGH
1000_guess - Predictable Random Number Generation in _addguess Function
CVSS 7.5
CVE-2017-16028
MEDIUM
react-native-meteor-oauth - Info Disclosure
CVSS 5.3
CVE-2017-18021
CRITICAL
qtpass < 1.2.1 - Use of Cryptographically Weak Pseudo-Random Number Generator in Password Generator
CVSS 9.8
CVE-2017-17845
HIGH
Enigmail < 1.9.9 - Use of Cryptographically Weak PRNG via Math.Random()
CVSS 7.3
CVE-2017-11671
MEDIUM
GCC 4.6-6.3 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVSS 4.0
CVE-2017-9230
HIGH
Bitcoin - Use of Cryptographically Weak Pseudo-Random Number Generator in Proof-of-Work Algorithm
CVSS 7.5
CVE-2017-8081
HIGH
GetSimple CMS 3.3.13 - Privilege Escalation and CSRF via Weak PRNG in Session Cookie
CVSS 8.8
CVE-2017-5493
HIGH
WordPress < 4.7 - Use of Cryptographically Weak PRNG in Multisite Signup Keys
CVSS 7.5
CVE-2015-9435
CRITICAL
WordPress oauth2-provider <3.1.5 - Info Disclosure
CVSS 9.8
CVE-2014-2362
OleumTech WIO DH2 - Info Disclosure
Details
Vulnerabilities
184
Exploit Likelihood
Medium