# CWE-331.

Every Advisory and CVE whose sources give the weakness CWE-331, newest first.

## Records, newest first (an older page)

- [DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm](https://agentprime.io/advisories/CVE-2025-27552.md)
  `CVE-2025-27552` · CVE record: WREIS DBIx::Class::EncodedColumn · CVSS 4.0 Medium · Not analysed yet · Published 26 Mar 2025 · Tags: Weak cryptography or TLS, CWE-331
- [DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm](https://agentprime.io/advisories/CVE-2025-27551.md)
  `CVE-2025-27551` · CVE record: WREIS DBIx::Class::EncodedColumn · CVSS 4.0 Medium · Not analysed yet · Published 26 Mar 2025 · Tags: Weak cryptography or TLS, CWE-331
- [Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack.](https://agentprime.io/advisories/CVE-2025-29311.md)
  `CVE-2025-29311` · CVE record · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2025 · Tags: CWE-331
- [DPA Countermeasures need reseeding](https://agentprime.io/advisories/CVE-2024-9055.md)
  `CVE-2024-9055` · CVE record: Silicon Labs Simplicity SDK · CVSS 4.2 Medium · Not analysed yet · Published 17 Mar 2025 · Tags: CWE-331
- [Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functions](https://agentprime.io/advisories/CVE-2025-1828.md)
  `CVE-2025-1828` · CVE record: perl Crypt::Random · CVSS 8.8 High · Not analysed yet · Published 10 Mar 2025 · Tags: Weak cryptography or TLS, CWE-331
- [Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI components.](https://agentprime.io/advisories/CVE-2024-53522.md)
  `CVE-2024-53522` · CVE record · CVSS 7.5 High · Not analysed yet · Published 7 Jan 2025 · Tags: CWE-331
- [In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated.](https://agentprime.io/advisories/CVE-2018-9426.md)
  `CVE-2018-9426` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 2 Dec 2024 · Tags: CWE-331
- [The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network.](https://agentprime.io/advisories/CVE-2023-37822.md)
  `CVE-2023-37822` · CVE record · CVSS 8.2 High · Not analysed yet · Published 3 Oct 2024 · Tags: CWE-331
- [Devise-Two-Factor Authentication Uses Insufficient Default OTP Shared Secret Length](https://agentprime.io/advisories/GHSA-qjxf-mc72-wjr2.md)
  `GHSA-qjxf-mc72-wjr2`, `CVE-2024-8796` · RubyGems `devise-two-factor`: affected `>=4.0.0, <6.0.0`, fixed in `6.0.0` · CVSS 6.0 Medium · Not analysed yet · Published 17 Sept 2024 · Tags: CWE-331
- [Zyxel GS1900-10HP firmware: An insufficient entropy vulnerability caused by the improper use of a randomness function…](https://agentprime.io/advisories/CVE-2024-38270.md)
  `CVE-2024-38270` · CVE record: Zyxel GS1900-10HP firmware · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-331
- [Openshift Console insufficient entropy vulnerability in github.com/openshift/console](https://agentprime.io/advisories/GHSA-4crf-28c7-v4gr.md)
  `GHSA-4crf-28c7-v4gr`, `CVE-2024-6508`, `GO-2024-3083` · Go `github.com/openshift/console`: affected `*`, no fixed version yet · CVSS 8.0 High · Not analysed yet · Published 30 Aug 2024 · Tags: CWE-331
- [Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability](https://agentprime.io/advisories/GHSA-848f-mph5-9pm9.md)
  `GHSA-848f-mph5-9pm9`, `PKSA-3bnk-phyr-4y6w` · Packagist `zendframework/zendframework1`: affected `>=1.12.0, <1.12.17`, fixed in `1.12.17` · CVSS 7.5 High · Not analysed yet · Published 7 Jun 2024 · Tags: CWE-331
- [ZendFramework1 Potential Insufficient Entropy Vulnerability](https://agentprime.io/advisories/GHSA-8xhv-gqm4-3w99.md)
  `GHSA-8xhv-gqm4-3w99`, `PKSA-85gv-59x4-jyqb` · Packagist `zendframework/zendframework1`: affected `>=1.12.0, <1.12.18`, fixed in `1.12.18` · CVSS 7.5 High · Not analysed yet · Published 7 Jun 2024 · Tags: CWE-331
- [Zend-Captcha Information Disclosure and Insufficient Entropy vulnerability](https://agentprime.io/advisories/GHSA-mg4x-prh7-g4mx.md)
  `GHSA-mg4x-prh7-g4mx`, `PKSA-kv74-yjnp-pcr9` · Packagist `zendframework/zend-captcha`: affected `>=2.0.0, <2.4.9 || >=2.5.0, <2.5.2`, fixed in `2.4.9`, `2.5.2` · CVSS 7.5 High · Not analysed yet · Published 7 Jun 2024 · Tags: CWE-331
- [ZendFramework Information Disclosure and Insufficient Entropy vulnerability](https://agentprime.io/advisories/GHSA-2fhr-8r8r-qp56.md)
  `GHSA-2fhr-8r8r-qp56`, `PKSA-jgk2-8mxq-5256` · Packagist `zendframework/zendframework`: affected `>=2.0.0, <2.4.9`, fixed in `2.4.9` · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2024 · Tags: Information disclosure, CWE-331
- [An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Ex…](https://agentprime.io/advisories/CVE-2023-49927.md)
  `CVE-2023-49927` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-331
- [Unable to generate the correct character set](https://agentprime.io/advisories/GHSA-9hc7-6w9r-wj94.md)
  `GHSA-9hc7-6w9r-wj94`, `CVE-2024-36400`, `GHSA-2hfw-w739-p7x5`, `RUSTSEC-2024-0343` · crates.io `nano-id`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2024 · Tags: CWE-331
- [random_compat Uses insecure CSPRNG](https://agentprime.io/advisories/GHSA-3fmq-x9q6-wm39.md)
  `GHSA-3fmq-x9q6-wm39`, `PKSA-cncr-q695-v65g` · Packagist `paragonie/random_compat`: affected `<2.0`, fixed in `2.0` · No CVSS score · Not analysed yet · Published 17 May 2024 · Tags: CWE-331
- [Insecure State Generation in laravel/socialite](https://agentprime.io/advisories/GHSA-h97c-qp24-439v.md)
  `GHSA-h97c-qp24-439v`, `PKSA-633b-bdtt-33gv` · Packagist `laravel/socialite`: affected `>=1.0.0, <2.0.9`, fixed in `2.0.9` · No CVSS score · Not analysed yet · Published 15 May 2024 · Tags: CWE-331
- [FOSUserBundle Entropy is lost in the TokenGenerator](https://agentprime.io/advisories/GHSA-pjx8-984p-7p3x.md)
  `GHSA-pjx8-984p-7p3x`, `PKSA-82cw-tyk8-jjch` · Packagist `friendsofsymfony/user-bundle`: affected `>=1.0.0, <1.3.5`, fixed in `1.3.5` · No CVSS score · Not analysed yet · Published 15 May 2024 · Tags: CWE-331
- [Insufficient Randomness When Validating an IPMI Authenticated Session](https://agentprime.io/advisories/CVE-2024-3411.md)
  `CVE-2024-3411` · CVE record: Dell iDRAC8 and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Apr 2024 · Tags: CWE-331
- [Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function.](https://agentprime.io/advisories/CVE-2024-26329.md)
  `CVE-2024-26329` · CVE record · CVSS 6.2 Medium · Not analysed yet · Published 5 Apr 2024 · Tags: CWE-331
- [Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy (only about one million p…](https://agentprime.io/advisories/CVE-2024-25730.md)
  `CVE-2024-25730` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Feb 2024 · Tags: CWE-331
- [Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices](https://agentprime.io/advisories/CVE-2024-22473.md)
  `CVE-2024-22473` · CVE record: silabs.com GSDK · CVSS 6.8 Medium · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-331, CWE-1279
- [SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.](https://agentprime.io/advisories/CVE-2024-25407.md)
  `CVE-2024-25407` · CVE record · CVSS 7.5 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-331
- [WWBN AVideo Insufficient Entropy vulnerbaility](https://agentprime.io/advisories/GHSA-wqcc-qf63-c2x4.md)
  `GHSA-wqcc-qf63-c2x4`, `CVE-2023-49599`, `PKSA-c41p-f5f9-8mhz` · Packagist `wwbn/avideo`: affected `<=12.4`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-331
- [Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token](https://agentprime.io/advisories/CVE-2023-46648.md)
  `CVE-2023-46648` · CVE record: GitHub Enterprise Server · CVSS 8.3 High · Not analysed yet · Published 21 Dec 2023 · Tags: CWE-331
- [pubnub Insufficient Entropy vulnerability](https://agentprime.io/advisories/GHSA-5844-q3fc-56rh.md)
  `GHSA-5844-q3fc-56rh`, `CVE-2023-26154`, `GO-2023-2385`, `PKSA-fyvg-jy6y-h7w5`, `PYSEC-2026-1807` · crates.io `pubnub` and 11 more: affected `<0.4.0`, fixed in `0.4.0` · CVSS 5.9 Medium · Not analysed yet · Published 6 Dec 2023 · Tags: CWE-331
- [Insufficient entropy vulnerability could lead to authentication bypass](https://agentprime.io/advisories/CVE-2023-31176.md)
  `CVE-2023-31176` · CVE record: Schweitzer Engineering Laboratories SEL-451 · CVSS 7.5 High · Not analysed yet · Published 30 Nov 2023 · Tags: CWE-331
- [jose4j uses weak cryptographic algorithm](https://agentprime.io/advisories/GHSA-7g24-qg88-p43q.md)
  `GHSA-7g24-qg88-p43q`, `CVE-2023-31582` · Maven `org.bitbucket.b_c:jose4j`: affected `<0.9.3`, fixed in `0.9.3` · CVSS 7.5 High · Not analysed yet · Published 25 Oct 2023 · Tags: Weak cryptography or TLS, CWE-331
- [QTS, QuTS hero](https://agentprime.io/advisories/CVE-2023-34973.md)
  `CVE-2023-34973` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 3.1 Low · Not analysed yet · Published 24 Aug 2023 · Tags: CWE-331
- [Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection](https://agentprime.io/advisories/CVE-2023-4344.md)
  `CVE-2023-4344` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Aug 2023 · Tags: CWE-331
- [The affected TBox RTUs generate software security tokens using insufficient entropy.](https://agentprime.io/advisories/CVE-2023-36610.md)
  `CVE-2023-36610` · CVE record: Ovarro TBox MS-CPU32 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Jul 2023 · Tags: CWE-331
- [crypto-js uses insecure random numbers](https://agentprime.io/advisories/GHSA-3w3w-pxmm-2w2j.md)
  `GHSA-3w3w-pxmm-2w2j`, `CVE-2020-36732` · npm `crypto-js`: affected `>=3.2.0, <3.2.1`, fixed in `3.2.1` · CVSS 5.3 Medium · Not analysed yet · Published 12 Jun 2023 · Tags: Weak cryptography or TLS, CWE-331
- [Rancher cattle-token is predictable](https://agentprime.io/advisories/GHSA-8c69-r38j-rpfj.md)
  `GHSA-8c69-r38j-rpfj`, `CVE-2022-43755` · Go `github.com/rancher/rancher`: affected `>=2.6.0, <2.6.10 || >=2.7.0, <2.7.1`, fixed in `2.6.10`, `2.7.1` · CVSS 7.1 High · Not analysed yet · Published 25 Jan 2023 · Tags: Weak cryptography or TLS, CWE-331
- [Duplicate Advisory: GoUtils's randomly-generated alphanumeric strings contain significantly less entropy than expected](https://agentprime.io/advisories/GHSA-3839-6r69-m497.md)
  `GHSA-3839-6r69-m497`, `CVE-2021-4238`, `GHSA-xg2h-wx96-xgxr`, `GO-2022-0411` · Go `github.com/Masterminds/goutils`: affected `<1.1.1`, fixed in `1.1.1` · CVSS 9.1 Critical · Withdrawn · Not analysed yet · Published 28 Dec 2022 · Tags: CWE-331
- [PHPServerMon PRNG has Insufficient Entropy](https://agentprime.io/advisories/GHSA-hc4j-7mqg-cxjj.md)
  `GHSA-hc4j-7mqg-cxjj`, `CVE-2021-4241`, `PKSA-gr4f-57rz-jvf1` · Packagist `phpservermon/phpservermon`: affected `<3.6.0`, fixed in `3.6.0` · CVSS 2.6 Low · Not analysed yet · Published 16 Nov 2022 · Tags: Weak cryptography or TLS, CWE-331, CWE-1241
- [Insufficient Entropy in PHPServerMon PRNG](https://agentprime.io/advisories/GHSA-97w9-gcc7-vr8g.md)
  `GHSA-97w9-gcc7-vr8g`, `CVE-2021-4240`, `PKSA-4xb6-5kd4-yqqn` · Packagist `phpservermon/phpservermon`: affected `<3.6.0`, fixed in `3.6.0` · CVSS 2.6 Low · Not analysed yet · Published 16 Nov 2022 · Tags: Weak cryptography or TLS, CWE-331, CWE-1241
- [Zyxel GS1900 series firmware: An insufficient entropy vulnerability caused by the improper use of randomness sources…](https://agentprime.io/advisories/CVE-2022-34746.md)
  `CVE-2022-34746` · CVE record: Zyxel Zyxel GS1900 series firmware · CVSS 5.9 Medium · Not analysed yet · Published 20 Sept 2022 · Tags: CWE-331
- [Apache OpenOffice Weak Master Keys](https://agentprime.io/advisories/CVE-2022-37401.md)
  `CVE-2022-37401` · CVE record: Apache Software Foundation Apache OpenOffice · No CVSS score · Not analysed yet · Published 13 Aug 2022 · Tags: CWE-331
- [Dell BSAFE Micro Edition Suite: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…](https://agentprime.io/advisories/CVE-2020-29508.md)
  `CVE-2020-29508` · CVE record: Dell Dell BSAFE Micro Edition Suite · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-331
- [Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…](https://agentprime.io/advisories/CVE-2020-29505.md)
  `CVE-2020-29505` · CVE record: Dell Dell BSAFE Crypto-C Micro Edition · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-331
- [OpenVPN Access Server: OpenVPN Access Server before 2.11 uses a weak random generator used to create user…](https://agentprime.io/advisories/CVE-2022-33738.md)
  `CVE-2022-33738` · CVE record: OpenVPN Access Server · No CVSS score · Not analysed yet · Published 6 Jul 2022 · Tags: CWE-331
- [Lemur uses static IV per key](https://agentprime.io/advisories/GHSA-chg9-3c3p-ch23.md)
  `GHSA-chg9-3c3p-ch23`, `CVE-2015-7764`, `PYSEC-2017-50` · PyPI `lemur`: affected `<0.1.5`, fixed in `0.1.5` · CVSS 7.5 High · Not analysed yet · Published 13 May 2022 · Tags: CWE-331
- [Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability.](https://agentprime.io/advisories/CVE-2021-36294.md)
  `CVE-2021-36294` · CVE record: Dell VNX Control Station · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jan 2022 · Tags: CWE-331
- [Dell Networking X-Series: Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication…](https://agentprime.io/advisories/CVE-2021-36320.md)
  `CVE-2021-36320` · CVE record: Dell Networking X-Series · CVSS 7.5 High · Not analysed yet · Published 20 Nov 2021 · Tags: CWE-331
- [EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8…: A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4…](https://agentprime.io/advisories/CVE-2021-22727.md)
  `CVE-2021-22727` · CVE record: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) · No CVSS score · Not analysed yet · Published 21 Jul 2021 · Tags: CWE-331
- [Denial of service attack via push rule patterns in matrix-synapse](https://agentprime.io/advisories/GHSA-x345-32rc-8h85.md)
  `GHSA-x345-32rc-8h85`, `CVE-2021-29471`, `PYSEC-2021-135` · PyPI `matrix-synapse`: affected `<1.33.2`, fixed in `1.33.2` · CVSS 3.7 Low · Not analysed yet · Published 13 May 2021 · Tags: Denial of service, CWE-331
- [A flaw was found in libtpms in versions before 0.8.0.](https://agentprime.io/advisories/CVE-2021-3505.md)
  `CVE-2021-3505` · CVE record: libtpms · No CVSS score · Not analysed yet · Published 19 Apr 2021 · Tags: CWE-331
- [Insufficient Entropy in parsel](https://agentprime.io/advisories/GHSA-vjvw-wcmw-pr26.md)
  `GHSA-vjvw-wcmw-pr26` · npm `parsel`: affected `>=0.0.0`, no fixed version yet · No CVSS score · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-331
- [Insecure Entropy Source - Math.random() in node-uuid](https://agentprime.io/advisories/GHSA-265q-28rp-chq5.md)
  `GHSA-265q-28rp-chq5`, `CVE-2015-8851` · npm `node-uuid`: affected `<1.4.4`, fixed in `1.4.4` · CVSS 7.5 High · Not analysed yet · Published 16 Apr 2020 · Tags: CWE-331
- [Session / Password / Password token leak](https://agentprime.io/advisories/CVE-2020-1773.md)
  `CVE-2020-1773` · CVE record: OTRS AG ((OTRS)) Community Edition and 1 more · CVSS 7.3 High · Not analysed yet · Published 27 Mar 2020 · Tags: CWE-331
- [Pallets Werkzeug Insufficient Entropy](https://agentprime.io/advisories/GHSA-gq9m-qvpx-68hc.md)
  `GHSA-gq9m-qvpx-68hc`, `CVE-2019-14806`, `PYSEC-2019-140` · PyPI `werkzeug`: affected `<0.15.3`, fixed in `0.15.3` · CVSS 7.5 High · Not analysed yet · Published 21 Aug 2019 · Tags: CWE-331
- [Insufficient Entropy in DotNetNuke](https://agentprime.io/advisories/GHSA-pf46-gqg9-j3v3.md)
  `GHSA-pf46-gqg9-j3v3`, `CVE-2018-15812` · NuGet `DotNetNuke.Core`: affected `>=9.2.0, <9.2.2`, fixed in `9.2.2` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.47 · Not analysed yet · Published 5 Jul 2019 · Tags: CWE-331
- [Insufficient Entropy in DotNetNuke](https://agentprime.io/advisories/GHSA-xx3h-j3cx-8qfj.md)
  `GHSA-xx3h-j3cx-8qfj`, `CVE-2018-18326` · NuGet `DotNetNuke.Core`: affected `<9.3.0`, fixed in `9.3.0` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.54 · Not analysed yet · Published 5 Jul 2019 · Tags: CWE-331
- [Insufficient Entropy in cryptiles](https://agentprime.io/advisories/GHSA-rq8g-5pc5-wrhr.md)
  `GHSA-rq8g-5pc5-wrhr`, `CVE-2018-1000620` · npm `cryptiles`: affected `>=3.1.0, <3.1.3 || >=4.0.0, <4.1.2`, fixed in `3.1.3`, `4.1.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2018 · Tags: CWE-331
- [It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys.](https://agentprime.io/advisories/CVE-2017-2626.md)
  `CVE-2017-2626` · CVE record: Xorg libICE · CVSS 5.2 Medium · Not analysed yet · Published 27 Jul 2018 · Tags: CWE-331
- [It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys.](https://agentprime.io/advisories/CVE-2017-2625.md)
  `CVE-2017-2625` · CVE record: Xorg libXdmcp · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2018 · Tags: CWE-331
- [An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.](https://agentprime.io/advisories/CVE-2017-13992.md)
  `CVE-2017-13992` · CVE record: LOYTEC LVIS-3ME · No CVSS score · Not analysed yet · Published 5 Oct 2017 · Tags: CWE-331
- [Post Oak Bluetooth Traffic Systems Insufficient Entropy](https://agentprime.io/advisories/CVE-2012-4687.md)
  `CVE-2012-4687` · CVE record: Post Oak Traffic Systems AWAM Bluetooth Reader Traffic System · CVSS 7.6 High · Not analysed yet · Published 8 Dec 2012 · Tags: CWE-331

Newest: <https://agentprime.io/advisories/tag/cwe-331.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-331&cursor=WyIyMDI1LTAzLTI4VDAwOjU2OjA4LjY0NzAwMFoiLCJDVkUtMjAyNS0xODYwIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-331/?cursor=WyIyMDI1LTAzLTI4VDAwOjU2OjA4LjY0NzAwMFoiLCJDVkUtMjAyNS0xODYwIl0>. Everything for agents: <https://agentprime.io/llms.txt>.