İçeriğe atla
Noroxi

CWE-331 · 138 kayıt

Insufficient Entropy

Bu sınıftaki CVE’ler

138 kayıt

  • CVE-2008-1447
    56Planlayın

    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2

    OrtaCVSS 6,8SilahlaştırılmışEPSS %95

    microsoft · windows 20008 Tem 2008

  • CVE-2018-18326
    46Planlayın

    DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %54

    dnnsoftware · dotnetnuke3 Tem 2019

  • CVE-2018-15812
    44Planlayın

    DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %47

    dnnsoftware · dotnetnuke3 Tem 2019

  • CVE-2008-2108
    40Planlayın

    The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generat

    KritikCVSS 9,8İstismar yokEPSS %4

    php · php7 May 2008

  • CVE-2013-2260
    40Planlayın

    Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

    KritikCVSS 9,8İstismar yokEPSS %2

    cryptocat project · cryptocat4 Kas 2019

  • CVE-2022-34294
    40Planlayın

    totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers.

    KritikCVSS 9,8İstismar yokEPSS %2

    totd project · totd15 Ağu 2022

  • CVE-2022-43755
    40Planlayın

    Rancher: Non-random authentication token

    KritikCVSS 9,8İstismar yokEPSS %2

    suse · rancher7 Şub 2023

  • CVE-2020-12735
    40Planlayın

    reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.

    KritikCVSS 9,8İstismar yokEPSS %2

    domainmod · domainmod8 May 2020

  • CVE-2018-1000620
    40Planlayın

    Eran Hammer cryptiles version 4.1.1 earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() method that can result

    KritikCVSS 9,8İstismar yokEPSS %2

    cryptiles project · cryptiles9 Tem 2018

  • CVE-2021-36294
    39İzleyin

    Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %2

    dell · emc unity operating environment25 Oca 2022

  • CVE-2021-22727
    39İzleyin

    A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking

    KritikCVSS 9,8İstismar yokEPSS %1

    schneider-electric · evlink city evc1s22p4 firmware21 Tem 2021

  • CVE-2021-41615
    39İzleyin

    websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinpara

    KritikCVSS 9,8İstismar yokEPSS %1

    embedthis · goahead8 Ağu 2022

  • CVE-2021-33027
    39İzleyin

    Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.

    KritikCVSS 9,8İstismar yokEPSS %1

    sylabs · singularity19 Tem 2021

  • CVE-2021-36320
    39İzleyin

    Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    dell · x1008p firmware19 Kas 2021

  • CVE-2020-29508
    39İzleyin

    Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input

    KritikCVSS 9,8İstismar yokEPSS %1

    dell · bsafe crypto-c-micro-edition11 Tem 2022

  • CVE-2023-49599
    39İzleyin

    An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb.

    KritikCVSS 9,8İstismar yokEPSS %1

    wwbn · avideo10 Oca 2024

  • CVE-2023-31176
    39İzleyin

    Insufficient entropy vulnerability could lead to authentication bypass

    KritikCVSS 9,8İstismar yokEPSS %1

    selinc · sel-451 firmware30 Kas 2023

  • CVE-2024-25730
    39İzleyin

    Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring,

    KritikCVSS 9,8İstismar yokEPSS %1

    hitrontech · coda-4582u firmware23 Şub 2024

  • CVE-2024-36400
    39İzleyin

    nano-id is unable to generate the correct character set

    KritikCVSS 9,8İstismar yokEPSS %1

    viz · nano id4 Haz 2024

  • CVE-2023-4344
    39İzleyin

    Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

    KritikCVSS 9,8İstismar yokEPSS %1

    broadcom · raid controller web interface15 Ağu 2023

  • CVE-2026-38447
    39İzleyin

    osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing.

    KritikCVSS 9,8İstismar yokEPSS %1

    3 Ağu 2026

  • CVE-2026-13639
    39İzleyin

    An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009

    KritikCVSS 9,8İstismar yokEPSS %1

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2025-47781
    39İzleyin

    Rallly Insufficient Password Login Token Entropy Leads to Account Takeover

    KritikCVSS 9,8İstismar yokEPSS %1

    rallly · rallly14 May 2025

  • CVE-2025-67504
    39İzleyin

    WBCE CMS has Weak Random Number Generator in Password Generation Function

    KritikCVSS 9,8İstismar yokEPSS %1

    wbce · wbce cms9 Ara 2025

  • CVE-2026-34236
    39İzleyin

    Auth0 PHP SDK Insufficient Entropy in Cookie Encryption

    KritikCVSS 9,8İstismar yokEPSS %0

    auth0 · auth0-php1 Nis 2026

Tüm zafiyet sınıfları