CWE-1241 Use of Predictable Algorithm in Random Number Generator
baseThe device uses an algorithm that is predictable and generates a pseudo-random number.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (16)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4695US | high8.1 | — | ||
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | ||||
| CVE-2015-3405US | high7.5 | — | ||
ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the tem… | ||||
| CVE-2016-10180US | high7.5OT elevated | — | ||
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding. | ||||
| CVE-2021-3689US | high7.5OT elevated | — | ||
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator | ||||
| CVE-2019-10638US | medium6.5 | — | ||
In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such tr… | ||||
| CVE-2026-73576US | medium6.5 | — | ||
In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated… | ||||
| CVE-2021-3692US | medium5.3OT elevated | — | ||
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator | ||||
| CVE-2021-4241US | medium5.3OT elevated | — | ||
A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation lea… | ||||
| CVE-2021-4240US | medium5.3OT elevated | — | ||
A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The mani… | ||||
| CVE-2026-82191US | — | — | ||
Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A crafted link to the paypal no… | ||||
| CVE-2026-82190US | — | — | ||
Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla `secret` can c… | ||||
| CVE-2026-57869US | — | — | ||
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords… | ||||
| CVE-2026-6420US | —OT elevated | — | ||
A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The v… | ||||
| CVE-2026-26018US | — | — | ||
CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash t… | ||||
| CVE-2025-13079US | — | — | ||
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4… | ||||
| CVE-2025-32056US | — | — | ||
The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding respons… | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan