CWE-335 · Cryptography
Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
35CVEs
SortMost likely exploited
35 CVEs with CWE-335 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-12520An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in deterministic session…Ntop · Ntopng · 2018-07-05 | – | 10% | 2018-07-05 |
| CVE-2016-10180An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.Dlink · Dwr-932b Firmware · CVSS 7.5 · 2017-01-30 | 7.5 | 4.5% | 2017-01-30 |
| CVE-2021-27211steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data.Steghide Project · Steghide · 2021-02-15 | – | 3.4% | 2021-02-15 |
| CVE-2021-41117Insecure random number generationjuliangruber · keypair · CVSS 8.7 · 2021-10-11 | 8.7 | 3.2% | 2021-10-11 |
| CVE-2017-11519passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed i…Tp-Link · Archer C9 (2.0) Firmware · 2017-07-21 | – | 3.1% | 2017-07-21 |
| CVE-2018-1426IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could r…IBM · DB2 for Linux, UNIX and Windows · CVSS 7.4 · 2018-03-22 | 7.4 | 2.4% | 2018-03-22 |
| CVE-2019-11495In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seed the PRNG which results in a small se…Couchbase · Couchbase Server · 2019-09-10 | – | 2.1% | 2019-09-10 |
| CVE-2019-25061The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic nature, can facilitate pass…Random Password Generator Project · Random Password Generator · 2022-05-18 | – | 1.9% | 2022-05-18 |
| CVE-2019-10908In Airsonic 10.2.1, RecoverController.java generates passwords via org.apache.commons.lang.RandomStringUtils, which uses java.util.Random internally. This PRNG has a 48-bit seed t…Airsonic Project · Airsonic · 2019-04-07 | – | 1.6% | 2019-04-07 |
| CVE-2012-1577lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.dietlibc · dietlibc · 2019-12-10 | – | 1.6% | 2019-12-10 |
| CVE-2018-12384When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the…NSS · Network Security Services (NSS) · 2019-04-29 | – | 1.5% | 2019-04-29 |
| CVE-2020-7010Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determine when the current Elastic Sta…Elastic · Elastic Cloud on Kubernetes · 2020-06-03 | – | 1.4% | 2020-06-03 |
| CVE-2016-3735Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmt_rand in order to generate password reset tokens. mt_rand output c…Piwigo · Piwigo · 2022-01-28 | – | 1.4% | 2022-01-28 |
| CVE-2020-13784D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator.Dlink · Dir-865l Firmware · 2020-06-03 | – | 1.3% | 2020-06-03 |
| CVE-2024-27632An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.Gnu · Savane · CVSS 8.8 · 2024-04-08 | 8.8 | 1.3% | 2024-04-08 |
| CVE-2017-5214The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to re…Codextrous · B2j Contact · 2017-05-17 | – | 1.2% | 2017-05-17 |
| CVE-2024-36048QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to se…Qt · Qt · CVSS 9.8 · 2024-05-18 | 9.8 | 1.0% | 2024-05-18 |
| CVE-2022-39218Random number seed fixed during compilationfastly · js-compute-runtime · CVSS 7.5 · 2022-09-20 | 7.5 | 0.9% | 2022-09-20 |
| CVE-2025-24783Apache Cocoon: continuations may not be privateApache Software Foundation · Apache Cocoon · CVSS 7.5 · 2025-01-27 | 7.5 | 0.8% | 2025-01-27 |
| CVE-2022-42159D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.Dlink · Covr 1203 Firmware · CVSS 4.3 · 2022-10-13 | 4.3 | 0.8% | 2022-10-13 |
| CVE-2023-4472Cryptographically weak PRNG in Opinio 7.22Objectplanet · Opinio · CVSS 9.8 · 2024-02-01 | 9.8 | 0.7% | 2024-02-01 |
| CVE-2025-27580NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and…NIH · BRICS · CVSS 7.5 · 2025-04-23 | 7.5 | 0.7% | 2025-04-23 |
| CVE-2021-32033Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be se…Protectimus · Slim Nfc 70 Firmware · 2021-06-16 | – | 0.5% | 2021-06-16 |
| CVE-2024-1579Insufficient seeding of random number generatorSecomea · GateManager · CVSS 8.1 · 2024-04-29 | 8.1 | 0.5% | 2024-04-29 |
| CVE-2026-11702Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processesDAVIDO · Bytes::Random::Secure::Tiny · CVSS 7.5 · 2026-06-26 | 7.5 | 0.5% | 2026-06-26 |
| CVE-2026-11625Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processesDAVIDO · Bytes::Random::Secure · CVSS 7.5 · 2026-06-26 | 7.5 | 0.5% | 2026-06-26 |
| CVE-2026-41564CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forkingMIK · CryptX · CVSS 7.5 · 2026-04-23 | 7.5 | 0.4% | 2026-04-23 |
| CVE-2021-34600Telenot complex: Insecure AES Key GenerationTelenot Electronic GmbH · CompasX · CVSS 5.5 · 2022-01-20 | 5.5 | 0.4% | 2022-01-20 |
| CVE-2024-55566ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPac…No vendor recorded · CVSS 6.6 · 2024-12-09 | 6.6 | 0.2% | 2024-12-09 |
| CVE-2026-11730Insufficient session randomness vulnerability exists in certain NETGEAR EX Series ModelsNETGEAR · EX3700 · CVSS 5.4 · 2026-10-13 | 5.4 | 0.2% | 2026-10-13 |
| CVE-2026-25835Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).Arm · Mbed Tls · CVSS 7.7 · 2026-04-01 | 7.7 | 0.2% | 2026-04-01 |
| CVE-2026-3503Fault injection attack with ML-DSA and ML-KEM on ARMwolfSSL Inc. · wolfSSL (wolfCrypt) · CVSS 4.3 · 2026-03-19 | 4.3 | 0.2% | 2026-03-19 |
| CVE-2025-52578Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise inte…Gallagher · High Sec End of Line Module · CVSS 5.7 · 2025-11-18 | 5.7 | 0.2% | 2025-11-18 |
| CVE-2026-118765Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing staterandombit · botan · CVSS 7.3 · 2026-10-29 | 7.3 | 0.1% | 2026-10-29 |
| CVE-2025-29941Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a…AMD · AMD EPYC™ 9004 Series Processors · CVSS 6 · 2026-11-10 | 6.0 | 0.1% | 2026-11-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.