CWE-331 · Cryptography
Insufficient Entropy
128CVEs
SortMost likely exploited
128 CVEs with CWE-331 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2008-1447The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; a…Isc · Bind · 2008-07-08 | – | 95% | 2008-07-08 |
| CVE-2018-18326DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplet…Dnnsoftware · Dotnetnuke · 2019-07-03 | – | 54% | 2019-07-03 |
| CVE-2018-15812DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.Dnnsoftware · Dotnetnuke · 2019-07-03 | – | 47% | 2019-07-03 |
| CVE-2023-38357Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions.Rws · Worldserver · 2023-08-01 | – | 5.3% | 2023-08-01 |
| CVE-2015-3405ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the te…Ntp · Ntp · 2017-08-09 | – | 5.3% | 2017-08-09 |
| CVE-2008-2108The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conver…Php · Php · 2008-05-07 | – | 4.3% | 2008-05-07 |
| CVE-2019-10064hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate…W1.fi · Hostapd · 2020-02-28 | – | 3.9% | 2020-02-28 |
| CVE-2017-13992An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interfa…Loytec · LOYTEC LVIS-3ME · 2017-10-05 | – | 3.5% | 2017-10-05 |
| CVE-2019-15847The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy o…Gnu · Gcc · 2019-09-02 | – | 3.2% | 2019-09-02 |
| CVE-2015-8851node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.node-uuid · node-uuid · CVSS 7.5 · 2020-01-30 | 7.5 | 2.3% | 2020-01-30 |
| CVE-2025-6931D-Link DCS-6517/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropyD-Link · DCS-6517 · CVSS 3.7 · 2025-06-30 | 3.7 | 2.2% | 2025-06-30 |
| CVE-2013-2260Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy WeaknessCryptocat · Cryptocat · 2019-11-04 | – | 2.2% | 2019-11-04 |
| CVE-2022-37401Apache OpenOffice Weak Master KeysApache Software Foundation · Apache OpenOffice · 2022-08-13 | – | 1.9% | 2022-08-13 |
| CVE-2019-14806Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.Palletsprojects · Werkzeug · 2019-08-09 | – | 1.9% | 2019-08-09 |
| CVE-2022-34294totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection…Totd Project · Totd · 2022-08-15 | – | 1.9% | 2022-08-15 |
| CVE-2019-14317wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hund…Wolfssl · Wolfssl · 2019-12-11 | – | 1.8% | 2019-12-11 |
| CVE-2022-43755Rancher: Non-random authentication tokenSUSE · Rancher · CVSS 7.1 · 2023-02-07 | 7.1 | 1.7% | 2023-02-07 |
| CVE-2020-12735reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.Domainmod · Domainmod · 2020-05-08 | – | 1.7% | 2020-05-08 |
| CVE-2018-1000620Eran Hammer cryptiles version 4.1.1 earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() method that can result in An attacker is more likely to be abl…Cryptiles Project · Cryptiles · 2018-07-09 | – | 1.7% | 2018-07-09 |
| CVE-2001-0950ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand fun…Valicert · Enterprise Validation Authority · 2002-02-02 | – | 1.6% | 2002-02-02 |
| CVE-2014-8422The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient…Unify · Openstage Sip · 2018-04-12 | – | 1.6% | 2018-04-12 |
| CVE-2021-36294Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging…Dell · VNX Control Station · CVSS 9.8 · 2022-01-25 | 9.8 | 1.6% | 2022-01-25 |
| CVE-2012-4687Post Oak Bluetooth Traffic Systems Insufficient EntropyPost Oak Traffic Systems · AWAM Bluetooth Reader Traffic System · CVSS 7.6 · 2012-12-08 | 7.6 | 1.5% | 2012-12-08 |
| CVE-2015-7764Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode.Netflix · Lemur · 2017-08-09 | – | 1.5% | 2017-08-09 |
| CVE-2020-1773Session / Password / Password token leakOTRS AG · ((OTRS)) Community Edition · CVSS 7.3 · 2020-03-27 | 7.3 | 1.5% | 2020-03-27 |
| CVE-2021-4238Insufficient randomness in github.com/Masterminds/goutilsgithub.com/Masterminds/goutils · github.com/Masterminds/goutils · CVSS 9.1 · 2022-12-27 | 9.1 | 1.4% | 2022-12-27 |
| CVE-2021-22727A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior…Schneider-Electric · EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Pa… · 2021-07-21 | – | 1.4% | 2021-07-21 |
| CVE-2021-41615websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the s…Embedthis · Goahead · 2022-08-08 | – | 1.4% | 2022-08-08 |
| CVE-2022-3959drogon Session Hash small space of random valuesDrogon · drogon · CVSS 3.1 · 2022-11-11 | 3.1 | 1.4% | 2022-11-11 |
| CVE-2020-28924An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy…Rclone · Rclone · 2020-11-19 | – | 1.4% | 2020-11-19 |
| CVE-2018-8435A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability.…Microsoft · Windows Server 2016 · 2018-09-13 | – | 1.4% | 2018-09-13 |
| CVE-2022-33756CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially access sensitive da…Broadcom · CA Automic Automation · 2022-06-16 | – | 1.3% | 2022-06-16 |
| CVE-2021-33027Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.Sylabs · Singularity · 2021-07-19 | – | 1.3% | 2021-07-19 |
| CVE-2016-2564Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the more_entropy flag. Attackers can guess an…Invisioncommunity · Invision Power Board · 2017-04-23 | – | 1.3% | 2017-04-23 |
| CVE-2020-25926The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is:…Hcc-Embedded · Nichestack Tcp/ip · 2021-08-18 | – | 1.3% | 2021-08-18 |
| CVE-2020-29508Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.Dell · Dell BSAFE Micro Edition Suite · CVSS 5.3 · 2022-07-11 | 5.3 | 1.2% | 2022-07-11 |
| CVE-2021-36320Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and…Dell · Networking X-Series · CVSS 7.5 · 2021-11-20 | 7.5 | 1.2% | 2021-11-20 |
| CVE-2017-18883An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.Mattermost · Mattermost Server · 2020-06-19 | – | 1.1% | 2020-06-19 |
| CVE-2019-9555Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of known values and a nonce with insufficien…Sagemcom · F@st 5260 Firmware · 2019-03-05 | – | 1.1% | 2019-03-05 |
| CVE-2020-36732The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary.Crypto-Js Project · Crypto-Js · CVSS 5.3 · 2023-06-12 | 5.3 | 1.1% | 2023-06-12 |
| CVE-2021-4240phpservermon User.php generatePasswordResetToken predictable algorithm in random number generatorPhpservermonitor · phpservermon · CVSS 2.6 · 2022-11-15 | 2.6 | 1.1% | 2022-11-15 |
| CVE-2022-33989dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DNS cache poisoning be…Dproxy-Nexgen Project · Dproxy-Nexgen · 2022-08-15 | – | 1.0% | 2022-08-15 |
| CVE-2018-10240SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL parameter in lieu of…Solarwinds · Serv-U · 2018-05-16 | – | 1.0% | 2018-05-16 |
| CVE-2021-4241phpservermon User.php setUserLoggedIn predictable algorithm in random number generatorPhpservermonitor · phpservermon · CVSS 2.6 · 2022-11-15 | 2.6 | 1.0% | 2022-11-15 |
| CVE-2014-0691Cisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it easier for remote attackers to bypass authentication and join arbitrary meetings…Cisco · Webex Meetings Server · 2017-10-24 | – | 1.0% | 2017-10-24 |
| CVE-2019-15703An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed…Fortinet · Fortinet FortiOS · 2019-10-24 | – | 1.0% | 2019-10-24 |
| CVE-2023-26154Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pu…Pubnub · pubnub · CVSS 5.9 · 2023-12-06 | 5.9 | 1.0% | 2023-12-06 |
| CVE-2023-49599An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted series of HTTP requests can lead…WWBN · AVideo · CVSS 9.8 · 2024-01-10 | 9.8 | 1.0% | 2024-01-10 |
| CVE-2022-33738OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portalOpenvpn · OpenVPN Access Server · 2022-07-06 | – | 0.9% | 2022-07-06 |
| CVE-2023-31176Insufficient entropy vulnerability could lead to authentication bypassSchweitzer Engineering Laboratories · SEL-451 · CVSS 7.5 · 2023-11-30 | 7.5 | 0.9% | 2023-11-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.