CWE-338 · Cryptography
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
190CVEs
SortMost likely exploited
190 CVEs with CWE-338 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-29868CheckApache StreamPipes <= 0.93.0 - Use of Cryptographically Weak PRNG in Recovery Token GenerationApache Software Foundation · Apache StreamPipes · CVSS 9.1 · 2024-06-24 | 9.1 | 6.0% | 2024-06-24 |
| CVE-2024-38353CheckCodiMD <2.5.4 - Insecure Filename Randomizationhackmdio · codimd · CVSS 5.3 · 2024-07-10 | 5.3 | 1.1% | 2024-07-10 |
| CVE-2008-0166OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remo…Openssl · Openssl · 2008-05-13 | – | 71% | 2008-05-13 |
| CVE-2009-2367cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessin…Iomega · Storcenter Pro Firmware · 2009-07-08 | – | 23% | 2009-07-08 |
| CVE-2024-31497In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signature…Putty · Putty · CVSS 5.9 · 2024-04-15 | 5.9 | 5.7% | 2024-04-15 |
| CVE-2021-43799RabbitMQ exposes ports with weak default secrets in Zulip Serverzulip · zulip · CVSS 8.6 · 2022-01-25 | 8.6 | 5.4% | 2022-01-25 |
| CVE-2008-3280It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166). In…Openid · openid · 2021-05-21 | – | 4.0% | 2021-05-21 |
| CVE-2020-10560An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permis…Opensource-Socialnetwork · Open Source Social Network · 2020-03-30 | – | 3.8% | 2020-03-30 |
| CVE-2019-16303A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 Random…Jhipster · Jhipster · 2019-09-13 | – | 3.7% | 2019-09-13 |
| CVE-2017-9230The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 1…Bitcoin · Bitcoin · CVSS 7.5 · 2017-05-24 | 7.5 | 3.3% | 2017-05-24 |
| CVE-2017-5493wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers…Wordpress · Wordpress · 2017-01-15 | – | 2.9% | 2017-01-15 |
| CVE-2022-26779Apache Cloudstack insecure random number generation affects project email invitationApache Software Foundation · Apache CloudStack · 2022-03-15 | – | 2.9% | 2022-03-15 |
| CVE-2020-28642In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover…Infinitewp · Infinitewp · 2020-11-16 | – | 2.6% | 2020-11-16 |
| CVE-2017-18021It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GU…Qtpass · Qtpass · 2018-01-05 | – | 2.4% | 2018-01-05 |
| CVE-2021-3538A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomn…Satori · satori/go.uuid · 2021-06-02 | – | 2.3% | 2021-06-02 |
| CVE-2022-35255A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. The…NodeJS · Node · CVSS 9.1 · 2022-12-05 | 9.1 | 2.1% | 2022-12-05 |
| CVE-2019-19794The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predict…Miekg-Dns Project · Miekg-Dns · 2019-12-13 | – | 2.1% | 2019-12-13 |
| CVE-2015-9435The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.Dash10 · Oauth Server · 2019-09-26 | – | 2.1% | 2019-09-26 |
| CVE-2026-61500Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Keyrejetto · hfs · CVSS 9.8 · 2026-07-13 | 9.8 | 1.9% | 2026-07-13 |
| CVE-2023-39910The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG re…Libbitcoin · Libbitcoin Explorer · 2023-08-09 | – | 1.8% | 2023-08-09 |
| CVE-2019-11842An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent…Matrix · Sydent · 2019-05-09 | – | 1.8% | 2019-05-09 |
| CVE-2019-10754Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due t…Apereo · Apereo CAS · 2019-09-23 | – | 1.8% | 2019-09-23 |
| CVE-2018-12056The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed v…All-For-One · All For One · 2018-08-15 | – | 1.7% | 2018-08-15 |
| CVE-2018-17877A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used t…Greedy599 · Greedy 599 · 2018-10-23 | – | 1.6% | 2018-10-23 |
| CVE-2009-3238The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value,…Linux · Linux Kernel · 2009-09-18 | – | 1.6% | 2009-09-18 |
| CVE-2017-17845An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is used by pretty Easy privacy (pEp), aka TBE-01-001.Enigmail · Enigmail · 2017-12-22 | – | 1.6% | 2017-12-22 |
| CVE-2022-40769profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exp…Profanity Project · Profanity · 2022-09-18 | – | 1.6% | 2022-09-18 |
| CVE-2019-5440Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bypass attack if an attacker exploits th…Revive · Revive Adserver · 2019-05-28 | – | 1.6% | 2019-05-28 |
| CVE-2014-2362OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number GeneratorOleumTech · WIO DH2 Wireless Gateway · CVSS 7.8 · 2014-07-24 | 7.8 | 1.6% | 2014-07-24 |
| CVE-2022-0828Download Manager < 3.2.39 - Unauthenticated brute force of files master keyW3eden · Download Manager · 2022-04-11 | – | 1.5% | 2022-04-11 |
| CVE-2022-29245Weak private key generation in SSH.NETsshnet · SSH.NET · CVSS 6.5 · 2022-05-31 | 6.5 | 1.5% | 2022-05-31 |
| CVE-2021-37553In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.Jetbrains · Youtrack · 2021-08-06 | – | 1.5% | 2021-08-06 |
| CVE-2018-12885The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current bloc…Mycryptochamp · Mycryptochamp · 2018-08-07 | – | 1.4% | 2018-08-07 |
| CVE-2022-36045Account takeover via cryptographically weak PRNG in NodeBB ForumNodeBB · NodeBB · CVSS 9 · 2022-08-31 | 9.0 | 1.3% | 2022-08-31 |
| CVE-2020-11616NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator (PRNG) algorithm used i…NVIDIA · NVIDIA DGX Servers · 2020-10-29 | – | 1.3% | 2020-10-29 |
| CVE-2019-11808Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window…Ratpack Project · Ratpack · 2019-05-07 | – | 1.3% | 2019-05-07 |
| CVE-2018-15795CredHub Service Broker uses guessable client secretPivotal Cloud Foundry · CredHub Service Broker · CVSS 8.1 · 2018-11-13 | 8.1 | 1.3% | 2018-11-13 |
| CVE-2017-8081Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct…Cagintranetworks · Getsimple Cms · 2017-04-30 | – | 1.3% | 2017-04-30 |
| CVE-2012-6124A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for se…chicken · chicken · 2019-10-31 | – | 1.3% | 2019-10-31 |
| CVE-2018-14715The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefor…Cryptogs · Cryptogs · 2018-08-03 | – | 1.3% | 2018-08-03 |
| CVE-2018-12975The random() function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the curre…Cryptosaga · Cryptosaga · 2018-09-24 | – | 1.3% | 2018-09-24 |
| CVE-2018-12454The _addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly readable variables such a…1000guess · 1000 Guess · 2018-06-17 | – | 1.3% | 2018-06-17 |
| CVE-2022-20817Cisco IP Phone Duplicate Key VulnerabilityCisco · Cisco IP Phones with Multiplatform Firmware · CVSS 7.4 · 2022-06-15 | 7.4 | 1.2% | 2022-06-15 |
| CVE-2018-17968A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a…Ruletkaio · Ruletkaio · 2018-10-23 | – | 1.2% | 2018-10-23 |
| CVE-2018-17071The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry…Lucky9 · Lucky9io · 2018-09-18 | – | 1.2% | 2018-09-18 |
| CVE-2019-7860A cryptographically weak pseudo-rando number generator is used in multiple security relevant contexts in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior…Magento · Magento 2 · 2019-08-02 | – | 1.2% | 2019-08-02 |
| CVE-2018-16115Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for TLS (both classic and…Lightbend · Akka · 2018-08-29 | – | 1.2% | 2018-08-29 |
| CVE-2018-15552The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable vari…Theethereumlottery · The Ethereum Lottery · 2018-09-07 | – | 1.2% | 2018-09-07 |
| CVE-2021-36171The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict…Fortinet · Fortinet FortiPortal · CVSS 8.1 · 2022-03-01 | 8.1 | 1.2% | 2022-03-01 |
| CVE-2019-10755The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtil…Pac4j · PAC4J For SAML Protocol · 2019-09-23 | – | 1.1% | 2019-09-23 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.