CWE-338 · Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (page 3)

Page 3 of 3 — CVEs classified under CWE-338, newest first, with CVSS severity and publication dates.

All CVEs classified under CWE-338 — newest first (page 3 of 3)
CVESeverityScorePublishedSummary
CVE-2017-11671Medium4.02017-07-26Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before…
CVE-2017-9230High7.52017-05-24The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks fo…
CVE-2017-8081High8.82017-04-30Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbit…
CVE-2017-5493High7.52017-01-15wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier f…
CVE-2014-23622014-07-24OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for re…
CVE-2009-3278Medium5.52009-09-21The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which…
CVE-2009-3238Medium5.52009-09-18The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predic…
CVE-2009-2367Critical9.82009-07-08cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via…
CVE-2008-0166High7.52008-05-13OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which make…