CWE-330 · Cryptography
Use of Insufficiently Random Values
330CVEs
0exploited
0with a public check
6likely (EPSS 10%+)
SortMost likely exploited
330 CVEs with CWE-330 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2008-0087The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.Microsoft · Windows 2000 · 2008-04-08 | – | 32% | 2008-04-08 |
| CVE-2017-6026A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware…Schneider-Electric · Schneider Electric Modicon PLCs · 2017-06-30 | – | 32% | 2017-06-30 |
| CVE-2018-17888NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrar…NUUO · NUUO CMS · 2018-10-12 | – | 30% | 2018-10-12 |
| CVE-2020-14422Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of s…Python · Python · 2020-06-18 | – | 13% | 2020-06-18 |
| CVE-2022-30295uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2.Uclibc · Uclibc · 2022-05-06 | – | 11% | 2022-05-06 |
| CVE-2008-2433The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session toke…Trendmicro · Client Server Messaging Suite · 2008-08-27 | – | 11% | 2008-08-27 |
| CVE-2009-0255The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which m…Typo3 · Typo3 · 2009-01-22 | – | 9.4% | 2009-01-22 |
| CVE-2017-16924Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for…Zohocorp · Manageengine Desktop Central · 2018-02-19 | – | 8.6% | 2018-02-19 |
| CVE-2020-12712A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that i…Sos-Berlin · Jobscheduler · 2020-06-11 | – | 7.8% | 2020-06-11 |
| CVE-2017-17091wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intende…Wordpress · Wordpress · 2017-12-02 | – | 7.0% | 2017-12-02 |
| CVE-2021-20322A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP…Linux · kernel · 2022-02-18 | – | 6.9% | 2022-02-18 |
| CVE-2020-25705A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP…Linux · Siemens Lunux Based Products · 2020-11-17 | – | 6.7% | 2020-11-17 |
| CVE-2019-1549Fork ProtectionOpenSSL · OpenSSL · 2019-09-10 | – | 6.2% | 2019-09-10 |
| CVE-2020-16166The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3e…Linux · Linux Kernel · 2020-07-30 | – | 5.2% | 2020-07-30 |
| CVE-2022-36536An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating cr…Syncovery · Syncovery · 2022-09-16 | – | 4.9% | 2022-09-16 |
| CVE-2009-2158account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a…Torrenttrader Project · Torrenttrader · 2009-06-22 | – | 4.5% | 2009-06-22 |
| CVE-2019-7667Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker can use brute force to identify the data…Primasystems · Flexair · 2019-07-01 | – | 4.5% | 2019-07-01 |
| CVE-2008-0141actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account v…Webportal Cms Project · Webportal Cms · 2008-01-08 | – | 4.3% | 2008-01-08 |
| CVE-2017-0897ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution.EllisLab · ExpressionEngine · 2017-06-22 | – | 4.0% | 2017-06-22 |
| CVE-2019-9898Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.Putty · Putty · 2019-03-21 | – | 3.9% | 2019-03-21 |
| CVE-2016-5085Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then…Animas · Onetouch Ping Firmware · 2016-10-05 | – | 3.9% | 2016-10-05 |
| CVE-2015-3963Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric…Windriver · Vxworks · 2015-08-04 | – | 3.7% | 2015-08-04 |
| CVE-2008-3612The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof…Apple · Iphone Os · 2008-09-10 | – | 3.5% | 2008-09-10 |
| CVE-2022-32284Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, which may allow a re…Yokogawa Electric Corporation · Communication Module for Wide Area Communication Router (for AW810D) VI461 · 2022-07-04 | – | 3.5% | 2022-07-04 |
| CVE-2019-11840An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation…Golang · Crypto · 2019-05-09 | – | 3.5% | 2019-05-09 |
| CVE-2020-11501GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client al…Gnu · Gnutls · 2020-04-03 | – | 3.4% | 2020-04-03 |
| CVE-2020-13817ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for…Ntp · Ntp · CVSS 7.4 · 2020-06-04 | 7.4 | 3.4% | 2020-06-04 |
| CVE-2021-27200In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day.Wowonder · Wowonder · 2021-06-11 | – | 3.4% | 2021-06-11 |
| CVE-2021-41829Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key.Zohocorp · Manageengine Remote Access Plus · 2021-09-30 | – | 3.2% | 2021-09-30 |
| CVE-2019-0729An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the randomness of the key, ak…Microsoft · Java SDK for Azure IoT · 2019-03-06 | – | 3.1% | 2019-03-06 |
| CVE-2018-20025Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.Kaspersky Lab · CODESYS V3 products · 2019-02-19 | – | 3.0% | 2019-02-19 |
| CVE-2019-18282The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a…Linux · Linux Kernel · 2020-01-16 | – | 2.9% | 2020-01-16 |
| CVE-2013-0294packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive informa…pyrad · pyrad · 2020-01-28 | – | 2.8% | 2020-01-28 |
| CVE-2023-29332Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityMicrosoft · Azure Kubernetes Service · CVSS 7.5 · 2023-09-12 | 7.5 | 2.7% | 2023-09-12 |
| CVE-2021-44151An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on t…Reprisesoftware · Reprise License Manager · 2021-12-13 | – | 2.6% | 2021-12-13 |
| CVE-2019-5885Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could all…Matrix · Synapse · 2019-03-19 | – | 2.5% | 2019-03-19 |
| CVE-2019-1010025GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's pos…GNU Libc · glibc · 2019-07-15 | – | 2.5% | 2019-07-15 |
| CVE-2020-7241The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP…Wpseeds · Wp Database Backup · 2020-01-20 | – | 2.4% | 2020-01-20 |
| CVE-2015-9019In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictabl…Xmlsoft · Libxslt · 2017-04-05 | – | 2.4% | 2017-04-05 |
| CVE-2019-15130The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a craf…Humanica · Humatrix 7 · 2019-08-18 | – | 2.4% | 2019-08-18 |
| CVE-2017-13077Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 2.4% | 2017-10-17 |
| CVE-2008-4929MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these…Mybb · Mybb · CVSS 7.5 · 2008-11-04 | 7.5 | 2.2% | 2008-11-04 |
| CVE-2019-9863Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker…Abus · Secvest Wireless Alarm System Fuaa50000 Firmware · 2019-03-27 | – | 2.1% | 2019-03-27 |
| CVE-2017-15654Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining administrative router access.Asus · Asuswrt · 2018-01-31 | – | 2.1% | 2018-01-31 |
| CVE-2020-17470An issue was discovered in FNET through 4.6.4. The code that initializes the DNS client interface structure does not set sufficiently random transaction IDs (they are always set t…Butok · Fnet · 2020-12-11 | – | 2.1% | 2020-12-11 |
| CVE-2020-35685An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As…Hcc-Embedded · Nichestack · 2021-08-19 | – | 2.1% | 2021-08-19 |
| CVE-2022-25047The password reset token in CWP v0.9.8.1126 is generated using known or predictable values.Control-Webpanel · Webpanel · 2022-07-07 | – | 2.0% | 2022-07-07 |
| CVE-2013-4102Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator WeaknessCryptocat Project · Cryptocat · 2019-11-04 | – | 2.0% | 2019-11-04 |
| CVE-2017-16031Socket.io is a realtime application framework that provides communication via websockets. Because socket.io 0.9.6 and earlier depends on `Math.random()` to create socket IDs, the…HackerOne · socket.io node module · 2018-06-04 | – | 1.9% | 2018-06-04 |
| CVE-2019-6821CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versio…Schneider-Electric · Modicon Controllers, Modicon M580 firmware versions prior to V2.30, and all fir… · 2019-05-22 | – | 1.9% | 2019-05-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.