CWE-1241 · weakness in Cryptography
Use of Predictable Algorithm in Random Number Generator
9 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.
- Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2
- Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2
- Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
- Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
- Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens
- In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated…
- Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
- Anti-Theft Bypass for Infotainment ECU
- Keylime: keylime: security bypass due to hardcoded tpm quote nonce
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.