CWE-331 in Cryptography
- CVEs
- 128
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-26329Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function. | – | Unlikely | 6.2 | 0.3% | 2024-04-05 |
| CVE-2026-2541Micca KE700 Brute-force vulnerability due to low entropy | Micca Auto Electronics Co., Ltd. · Car Alarm System KE700 | Unlikely | 6.4 | 0.2% | 2026-02-15 |
| CVE-2025-0577Glibc: vdso getrandom acceleration may return predictable randomness | Red Hat · Red Hat Enterprise Linux 10 | Unlikely | 4.8 | 0.2% | 2026-02-18 |
| CVE-2018-9426In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vu… | Google · Android | Unlikely | 6.5 | 0.2% | 2024-12-02 |
| CVE-2026-92209NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability | NoMachine · NoMachine | Unlikely | 7.8 | 0.2% | 2026-10-21 |
| CVE-2021-22799A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the… | Schneider-Electric · Software Update | Unlikely | – | 0.2% | 2022-01-28 |
| CVE-2026-2336Weak webstax_auth Cookie Authentication Allows Privilege Escalation | Microchip · IStaX | Unlikely | 8.7 | 0.2% | 2026-04-16 |
| CVE-2025-50122A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installat… | Schneider Electric · EcoStruxure™ IT Data Center Expert | Unlikely | 8.9 | 0.2% | 2025-07-11 |
| CVE-2023-37822The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PS… | Eufy · Homebase 2 Firmware | Unlikely | 8.2 | 0.2% | 2024-10-03 |
| CVE-2026-34236Auth0 PHP SDK Insufficient Entropy in Cookie Encryption | auth0 · auth0-PHP | Unlikely | 8.2 | 0.2% | 2026-04-01 |
| CVE-2025-12628WP 2FA < 3.0.0 - Second Factor Bypass | WP 2FA | Unlikely | 6.3 | 0.2% | 2025-11-24 |
| CVE-2024-38270An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP… | Zyxel · GS1900-10HP firmware | Unlikely | 5.3 | 0.2% | 2024-09-10 |
| CVE-2026-2878Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX | Progress Software · Telerik UI for ASP.NET AJAX | Unlikely | 5.3 | 0.2% | 2026-02-25 |
| CVE-2025-62774On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps. | Mercku · M6a | Unlikely | 3.1 | 0.2% | 2025-10-22 |
| CVE-2025-59015Insufficient Entropy in Password Generation | TYPO3 · TYPO3 CMS | Unlikely | 6.3 | 0.2% | 2025-09-09 |
| CVE-2024-9055DPA Countermeasures need reseeding | Silicon Labs · Simplicity SDK | Unlikely | 4.2 | 0.2% | 2025-03-17 |
| CVE-2025-13399Insecure Encryption in Communication with the Web Interface on TP-Link VX800v | TP-Link Systems Inc. · VX800v v1.0 | Unlikely | 7.7 | 0.2% | 2026-01-29 |
| CVE-2026-13199Insufficient Entropy in Raspberry Pi 5 and Compute Module 5 | Raspberry Pi · Raspberry Pi 5 and Compute Module 5 | Unlikely | 4.0 | 0.2% | 2026-07-07 |
| CVE-2025-7432DPA countermeasures not reseeded under certain conditions | silabs.com · Simplicity SDK | Unlikely | 1.0 | 0.2% | 2026-02-09 |
| CVE-2026-1814Rapid7 Nexpose Insecure Java Keystore Password Generation | Rapid7 · InsightVM/Nexpose | Unlikely | 6.8 | 0.2% | 2026-02-03 |
| CVE-2025-32898The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KD… | KDE · KDE Connect verification-code protocol | Unlikely | 4.7 | 0.2% | 2025-12-05 |
| CVE-2025-14972Insufficient DPA countermeasure reseeding | silabs.com · Simplicity SDK | Unlikely | 4.1 | 0.1% | 2026-05-15 |
| CVE-2026-4930DPA Countermeasures weakening on Series 3 devices | silabs.com · Simplicity SDK | Unlikely | 7.1 | 0.1% | 2026-06-25 |
| CVE-2026-4937Power System Insufficient Entropy | IBM · PowerVM Hypervisor | Unlikely | 5.3 | 0.1% | 2026-08-19 |
| CVE-2023-49927An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1… | Samsung · Exynos 9820 Firmware | Unlikely | 5.3 | 0.1% | 2024-06-05 |
| CVE-2026-80171Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A low privil… | Dell · Secure Connect Gateway 5.0 - Application | Unlikely | 4.7 | 0.1% | 2026-09-09 |
| CVE-2026-4932This Power System update is being released to address Insufficient Entropy | IBM · PowerVM Hypervisor | Unlikely | 4.2 | 0.1% | 2026-07-28 |
| CVE-2026-4936Power System Insufficient Entropy | IBM · PowerVM Hypervisor | Unlikely | 5.1 | 0.1% | 2026-08-19 |
Data as of 2026-11-15.