CWE-1204

6 CVEs classified under CWE-1204. Newest first, with CVSS severity, EPSS score and public exploits for each.

Top CVEs for CWE-1204
CVE	Severity	Score	Published	Summary
`CVE-2026-5087`	High	`7.5`	2026-03-31	PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attemp…
`CVE-2026-25998`	High	`7.5`	2026-02-19	strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strong…
`CVE-2022-26083`	High	`7.5`	2025-02-14	Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentiall…
`CVE-2025-0714`	Medium	`6.5`	2025-02-17	The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of…
`CVE-2023-2747`	Low	`3.1`	2023-06-15	The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.
`CVE-2026-8374`			2026-10-09	Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a…

All CVEs classified under CWE-1204 — newest first (page 1 of 1)
CVE	Severity	Score	Published	Summary
`CVE-2026-8374`			2026-10-09	Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a…
`CVE-2026-5087`	High	`7.5`	2026-03-31	PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attemp…
`CVE-2026-25998`	High	`7.5`	2026-02-19	strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strong…
`CVE-2025-0714`	Medium	`6.5`	2025-02-17	The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of…
`CVE-2022-26083`	High	`7.5`	2025-02-14	Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentiall…
`CVE-2023-2747`	Low	`3.1`	2023-06-15	The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.