CWE-1241 · 9 records

Use of Predictable Algorithm in Random Number Generator

CVEs in this class

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2023-4695No exploit	Use of Predictable Algorithm in Random Number Generator in pkp/pkp-libpkp · pkb-lib · CWE-1241 Pre-auth	High8.1	—	0.7%	Aug 31, 2023
31Monitor	CVE-2021-3689No exploit	Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2yiiframework · yii · CWE-1241 Pre-auth	High7.5	—	1.9%	Aug 10, 2021
26Monitor	CVE-2026-73576No exploit	In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration.synacor · zimbra collaboration suite · CWE-1241	Medium6.5	—	0.3%	Aug 13, 2026
25Monitor	CVE-2026-82190No exploit	Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · j2store extension for joomla · CWE-1241 Pre-auth	Medium6.3	—	0.3%	Sep 15, 2026
25Monitor	CVE-2026-6420No exploit	Keylime: keylime: security bypass due to hardcoded tpm quote noncered hat · red hat enterprise linux 10 · CWE-1241	Medium6.3	—	0.1%	May 6, 2026
22Monitor	CVE-2021-3692No exploit	Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2yiiframework · yii · CWE-1241 Pre-auth	Medium5.3	—	1.7%	Aug 10, 2021
21Monitor	CVE-2026-82191No exploit	Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · j2store extension for joomla · CWE-1241 Pre-auth	Medium5.3	—	0.4%	Sep 15, 2026
21Monitor	CVE-2025-13079No exploit	Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictapopupbuilder · popup builder – create highly converting, mobile friendly marketing popups. · CWE-1241 Pre-auth	Medium5.3	—	0.4%	Feb 19, 2026
16Monitor	CVE-2025-32056No exploit	Anti-Theft Bypass for Infotainment ECUbosch · infotainment system ecu · CWE-1241	Medium4.0	—	0.2%	Jan 22, 2026

CVE-2023-4695
32Monitor
Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
pkp · pkb-libAug 31, 2023
CVE-2021-3689
31Monitor
Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
yiiframework · yiiAug 10, 2021
CVE-2026-73576
26Monitor
In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration.
MediumCVSS 6.5No exploitEPSS 0%
synacor · zimbra collaboration suiteAug 13, 2026
CVE-2026-82190
25Monitor
Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
j2commerce.com · j2store extension for joomlaSep 15, 2026
CVE-2026-6420
25Monitor
Keylime: keylime: security bypass due to hardcoded tpm quote nonce
MediumCVSS 6.3No exploitEPSS 0%
red hat · red hat enterprise linux 10May 6, 2026
CVE-2021-3692
22Monitor
Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
yiiframework · yiiAug 10, 2021
CVE-2026-82191
21Monitor
Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
j2commerce.com · j2store extension for joomlaSep 15, 2026
CVE-2025-13079
21Monitor
Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predicta
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
popupbuilder · popup builder – create highly converting, mobile friendly marketing popups.Feb 19, 2026
CVE-2025-32056
16Monitor
Anti-Theft Bypass for Infotainment ECU
MediumCVSS 4.0No exploitEPSS 0%
bosch · infotainment system ecuJan 22, 2026

All vulnerability classes