CWE-1241 Use of Predictable Algorithm in Random Number Generator
baseThe device uses an algorithm that is predictable and generates a pseudo-random number.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
Schwachstellen (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-4695US | high8.1 | — | ||
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | ||||
| CVE-2015-3405US | high7.5 | — | ||
ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the tem… | ||||
| CVE-2016-10180US | high7.5OT erhöht | — | ||
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding. | ||||
| CVE-2021-3689US | high7.5OT erhöht | — | ||
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator | ||||
| CVE-2019-10638US | medium6.5 | — | ||
In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such tr… | ||||
| CVE-2026-73576US | medium6.5 | — | ||
In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated… | ||||
| CVE-2021-3692US | medium5.3OT erhöht | — | ||
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator | ||||
| CVE-2021-4241US | medium5.3OT erhöht | — | ||
A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation lea… | ||||
| CVE-2021-4240US | medium5.3OT erhöht | — | ||
A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The mani… | ||||
| CVE-2026-82191US | — | — | ||
Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A crafted link to the paypal no… | ||||
| CVE-2026-82190US | — | — | ||
Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla `secret` can c… | ||||
| CVE-2026-57869US | — | — | ||
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords… | ||||
| CVE-2026-6420US | —OT erhöht | — | ||
A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The v… | ||||
| CVE-2026-26018US | — | — | ||
CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash t… | ||||
| CVE-2025-13079US | — | — | ||
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4… | ||||
| CVE-2025-32056US | — | — | ||
The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding respons… | ||||
03
Angriffsmuster (1)
CAPEC-Angriffsmuster, die dies ausnutzen.
04
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan