CWE-338 · Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (page 3)
Page 3 of 3 — CVEs classified under CWE-338, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-11290 | High | 7.5 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427, SD… |
CVE-2018-17071 | High | 7.5 | 2018-09-18 | The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly rea… |
CVE-2018-15552 | High | 7.5 | 2018-09-07 | The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with pu… |
CVE-2018-16115 | Critical | 9.1 | 2018-08-29 | Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for T… |
CVE-2018-12056 | High | 7.5 | 2018-08-15 | The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables… |
CVE-2018-12885 | Medium | 5.9 | 2018-08-07 | The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such… |
CVE-2018-14715 | High | 7.5 | 2018-08-03 | The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old bl… |
CVE-2018-12454 | High | 7.5 | 2018-06-17 | The _addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly reada… |
CVE-2017-16028 | Medium | 5.3 | 2018-06-04 | react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically s… |
CVE-2017-18021 | Critical | 9.8 | 2018-01-05 | It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only appl… |
CVE-2017-17845 | High | 7.3 | 2017-12-27 | An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is used by pretty Easy privacy (pEp), aka TBE-… |
CVE-2017-11671 | Medium | 4.0 | 2017-07-26 | Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before… |
CVE-2017-9230 | High | 7.5 | 2017-05-24 | The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks fo… |
CVE-2017-8081 | High | 8.8 | 2017-04-30 | Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbit… |
CVE-2017-5493 | High | 7.5 | 2017-01-15 | wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier f… |
CVE-2014-2362 | | 2014-07-24 | OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for re… | |
CVE-2009-3278 | Medium | 5.5 | 2009-09-21 | The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which… |
CVE-2009-3238 | Medium | 5.5 | 2009-09-18 | The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predic… |
CVE-2009-2367 | Critical | 9.8 | 2009-07-08 | cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via… |
CVE-2008-0166 | High | 7.5 | 2008-05-13 | OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which make… |