CWE-1241

10 CVEs classified under CWE-1241. Browse by severity and year.

Top CVEs for CWE-1241
CVESeverityScorePublishedSummary
CVE-2023-4695High8.12023-09-01Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
CVE-2026-26018High7.52026-03-06CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows a…
CVE-2021-3689High7.52021-08-10yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVE-2016-10180High7.52017-01-30An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.
CVE-2026-73576Medium6.32026-08-13In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJw…
CVE-2026-6420Medium6.32026-05-06A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Ke…
CVE-2025-13079Medium5.32026-02-19The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up t…
CVE-2021-3692Medium5.32021-08-10yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVE-2025-32056Medium4.02026-01-22The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32…
CVE-2026-578692026-07-07Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents…
All CVEs classified under CWE-1241 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-73576Medium6.32026-08-13In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJw…
CVE-2026-578692026-07-07Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents…
CVE-2026-6420Medium6.32026-05-06A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Ke…
CVE-2026-26018High7.52026-03-06CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows a…
CVE-2025-13079Medium5.32026-02-19The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up t…
CVE-2025-32056Medium4.02026-01-22The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32…
CVE-2023-4695High8.12023-09-01Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
CVE-2021-3692Medium5.32021-08-10yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVE-2021-3689High7.52021-08-10yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVE-2016-10180High7.52017-01-30An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.