CWE-331.

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm

• WREIS DBIx::Class::EncodedColumn
• Weak cryptography or TLS
• CWE-331

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm

• WREIS DBIx::Class::EncodedColumn
• Weak cryptography or TLS
• CWE-331

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack.

• CWE-331

DPA Countermeasures need reseeding

• Silicon Labs Simplicity SDK
• CWE-331

Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functions

• perl Crypt::Random
• Weak cryptography or TLS
• CWE-331

Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI components.

• CWE-331

In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated.

• Google Android
• CWE-331

The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network.

• CWE-331

Devise-Two-Factor Authentication Uses Insufficient Default OTP Shared Secret Length

• CWE-331

>=4.0.0, <6.0.0 · fixed in 6.0.0

Zyxel GS1900-10HP firmware: An insufficient entropy vulnerability caused by the improper use of a randomness function…

• Zyxel GS1900-10HP firmware
• CWE-331

Openshift Console insufficient entropy vulnerability in github.com/openshift/console

• CWE-331

* · no fixed version yet

Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability

• CWE-331

>=1.12.0, <1.12.17 · fixed in 1.12.17

ZendFramework1 Potential Insufficient Entropy Vulnerability

• CWE-331

>=1.12.0, <1.12.18 · fixed in 1.12.18

Zend-Captcha Information Disclosure and Insufficient Entropy vulnerability

• CWE-331

>=2.0.0, <2.4.9 || >=2.5.0, <2.5.2 · fixed in 2.4.9, 2.5.2

ZendFramework Information Disclosure and Insufficient Entropy vulnerability

• Information disclosure
• CWE-331

>=2.0.0, <2.4.9 · fixed in 2.4.9

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Ex…

• CWE-331

Unable to generate the correct character set

• CWE-331

<0.4.0 · fixed in 0.4.0

random_compat Uses insecure CSPRNG

• CWE-331

<2.0 · fixed in 2.0

Insecure State Generation in laravel/socialite

• CWE-331

>=1.0.0, <2.0.9 · fixed in 2.0.9

FOSUserBundle Entropy is lost in the TokenGenerator

• CWE-331

>=1.0.0, <1.3.5 · fixed in 1.3.5

Insufficient Randomness When Validating an IPMI Authenticated Session

• Dell iDRAC8
• Intel IPMI
• CWE-331

Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function.

• CWE-331

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy (only about one million p…

• CWE-331

Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices

• silabs.com GSDK
• CWE-331
• CWE-1279

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.

• CWE-331

WWBN AVideo Insufficient Entropy vulnerbaility

• CWE-331

<=12.4 · no fixed version yet

Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

• GitHub Enterprise Server
• CWE-331

pubnub Insufficient Entropy vulnerability

• CWE-331

<0.4.0 · fixed in 0.4.0

Insufficient entropy vulnerability could lead to authentication bypass

• Schweitzer Engineering Laboratories SEL-451
• CWE-331

jose4j uses weak cryptographic algorithm

• Weak cryptography or TLS
• CWE-331

<0.9.3 · fixed in 0.9.3

QTS, QuTS hero

• QNAP Systems Inc. QTS
• QNAP Systems Inc. QuTS hero
• CWE-331

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

• Broadcom LSI Storage Authority (LSA)
• Intel RAID Web Console 3 (RWC3)
• CWE-331

The affected TBox RTUs generate software security tokens using insufficient entropy.

• Ovarro TBox MS-CPU32
• Ovarro TBox MS-CPU32-S2
• CWE-331

crypto-js uses insecure random numbers

• Weak cryptography or TLS
• CWE-331

>=3.2.0, <3.2.1 · fixed in 3.2.1

Rancher cattle-token is predictable

• Weak cryptography or TLS
• CWE-331

>=2.6.0, <2.6.10 || >=2.7.0, <2.7.1 · fixed in 2.6.10, 2.7.1

Duplicate Advisory: GoUtils's randomly-generated alphanumeric strings contain significantly less entropy than expected

• CWE-331

<1.1.1 · fixed in 1.1.1

PHPServerMon PRNG has Insufficient Entropy

• Weak cryptography or TLS
• CWE-331

<3.6.0 · fixed in 3.6.0

Insufficient Entropy in PHPServerMon PRNG

• Weak cryptography or TLS
• CWE-331

<3.6.0 · fixed in 3.6.0

Zyxel GS1900 series firmware: An insufficient entropy vulnerability caused by the improper use of randomness sources…

• Zyxel GS1900 series firmware
• CWE-331

Apache OpenOffice Weak Master Keys

• Apache Software Foundation Apache OpenOffice
• CWE-331

Dell BSAFE Micro Edition Suite: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…

• Dell BSAFE Micro Edition Suite
• CWE-331

Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…

• Dell BSAFE Crypto-C Micro Edition
• CWE-331

OpenVPN Access Server: OpenVPN Access Server before 2.11 uses a weak random generator used to create user…

• OpenVPN Access Server
• CWE-331

Lemur uses static IV per key

• CWE-331

<0.1.5 · fixed in 0.1.5

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability.

• Dell VNX Control Station
• CWE-331

Dell Networking X-Series: Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication…

• Dell Networking X-Series
• CWE-331

EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8…: A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4…

• EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
• CWE-331

Denial of service attack via push rule patterns in matrix-synapse

• Denial of service
• CWE-331

<1.33.2 · fixed in 1.33.2

A flaw was found in libtpms in versions before 0.8.0.

• libtpms
• CWE-331

Insufficient Entropy in parsel

• CWE-331

>=0.0.0 · no fixed version yet

Insecure Entropy Source - Math.random() in node-uuid

• CWE-331

<1.4.4 · fixed in 1.4.4

Session / Password / Password token leak

• OTRS AG ((OTRS)) Community Edition
• OTRS
• CWE-331

Pallets Werkzeug Insufficient Entropy

• CWE-331

<0.15.3 · fixed in 0.15.3

Insufficient Entropy in DotNetNuke

• CWE-331

>=9.2.0, <9.2.2 · fixed in 9.2.2

Insufficient Entropy in DotNetNuke

• CWE-331

<9.3.0 · fixed in 9.3.0

Insufficient Entropy in cryptiles

• CWE-331

>=3.1.0, <3.1.3 || >=4.0.0, <4.1.2 · fixed in 3.1.3, 4.1.2

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys.

• Xorg libICE
• CWE-331

It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys.

• Xorg libXdmcp
• CWE-331

An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.

• LOYTEC LVIS-3ME
• CWE-331

Post Oak Bluetooth Traffic Systems Insufficient Entropy

• Post Oak Traffic Systems AWAM Bluetooth Reader Traffic System
• CWE-331