agentprime: CWE-331

CVE-2026-92209: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

Wed, 21 Oct 2026 17:16:13 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112041: diem-project diem dmString.php random weak prng

Mon, 19 Oct 2026 02:00:21 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13639: Synology DiskStation Manager (DSM): An insufficient entropy vulnerability in login logic in Synology DiskStation Manager…

Fri, 18 Sep 2026 08:21:27 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90562: LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key

Sun, 13 Sep 2026 10:45:36 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-80171: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability.

Wed, 09 Sep 2026 11:06:32 GMT

CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-62646: A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

Tue, 08 Sep 2026 08:11:23 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-27490: Combodo iTop: Weak secret generation for inline image

Fri, 21 Aug 2026 19:59:29 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4936: Power System Insufficient Entropy

Wed, 19 Aug 2026 20:14:55 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4937: Power System Insufficient Entropy

Wed, 19 Aug 2026 20:11:01 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19906: pkp pkp-lib API Key Generation APIProfileForm.php setData entropy

Sat, 15 Aug 2026 19:00:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19748: Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy

Thu, 13 Aug 2026 20:15:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

Fri, 07 Aug 2026 18:48:59 GMT

crypto-js <4.0.0, fixed in 4.0.0. CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-15629: Weak Session Key Generation in TP-Link Omada Adoption Protocol

Mon, 03 Aug 2026 17:50:44 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-38447: osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing.

Mon, 03 Aug 2026 00:00:00 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4932: This Power System update is being released to address Insufficient Entropy

Tue, 28 Jul 2026 18:09:32 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11403: Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key Generation

Tue, 14 Jul 2026 15:28:23 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13199: Insufficient Entropy in Raspberry Pi 5 and Compute Module 5

Tue, 07 Jul 2026 08:36:57 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4930: DPA Countermeasures weakening on Series 3 devices

Thu, 25 Jun 2026 18:39:26 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46473: Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand

Thu, 21 May 2026 18:53:18 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8700: Crypt::DSA versions before 1.20 for Perl generate seeds using rand

Fri, 15 May 2026 22:10:52 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46474: Trog::TOTP versions before 1.006 for Perl generate secrets using rand

Fri, 15 May 2026 17:41:32 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-14972: Insufficient DPA countermeasure reseeding

Fri, 15 May 2026 14:35:09 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4827: Insufficient Entropy vulnerability on Multiple Products

Tue, 12 May 2026 12:24:22 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7210: The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

Mon, 11 May 2026 17:19:09 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs

Tue, 05 May 2026 19:35:56 GMT

openmage/magento-lts <20.18.0, fixed in 20.18.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-2336: Weak webstax_auth Cookie Authentication Allows Privilege Escalation

Thu, 16 Apr 2026 17:02:06 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-41080: libexpat: libexpat before 2.8.0 uses insufficient entropy…

Thu, 16 Apr 2026 16:52:01 GMT

CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Auth0 Symfony SDK has Insufficient Entropy in Cookie Encryption

Fri, 03 Apr 2026 03:44:13 GMT

auth0/symfony >=5.0.0, <5.8.0, fixed in 5.8.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Auth0 WordPress Plugin has Insufficient Entropy in Cookie Encryption

Fri, 03 Apr 2026 03:43:13 GMT

auth0/wordpress >=5.0.0-BETA0, <5.6.0, fixed in 5.6.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption

Fri, 03 Apr 2026 03:41:04 GMT

auth0/login >=7.0.0, <7.21.0, fixed in 7.21.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption

Wed, 01 Apr 2026 20:29:26 GMT

auth0/auth0-php >=8.0.0, <8.19.0, fixed in 8.19.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure

Thu, 26 Mar 2026 17:58:55 GMT

libcrux-ed25519 <0.0.7, fixed in 0.0.7. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-2878: Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX

Wed, 25 Feb 2026 14:45:11 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-0577: Glibc: vdso getrandom acceleration may return predictable randomness

Wed, 18 Feb 2026 20:25:34 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-2541: Micca KE700 Brute-force vulnerability due to low entropy

Sun, 15 Feb 2026 11:07:40 GMT

CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-7432: DPA countermeasures not reseeded under certain conditions

Mon, 09 Feb 2026 16:07:54 GMT

CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-1814: Rapid7 Nexpose Insecure Java Keystore Password Generation

Tue, 03 Feb 2026 14:54:12 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13399: Insecure Encryption in Communication with the Web Interface on TP-Link VX800v

Thu, 29 Jan 2026 18:05:28 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

SM2-PKE has 32-bit Biased Nonce Vulnerability

Fri, 09 Jan 2026 22:27:50 GMT

sm2 >=0.14.0-pre.0, <=0.14.0-rc.4, no fixed version yet. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2020-36925: Arteco Web Client DVR/NVR Session ID Brute Force Authentication Bypass

Tue, 06 Jan 2026 15:52:28 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-15387: QNO Technology｜VPN Firewall - Insufficient Entropy

Wed, 31 Dec 2025 08:23:59 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils

Mon, 15 Dec 2025 19:37:35 GMT

github.com/gofiber/utils <1.2.0, fixed in 1.2.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-67504: WBCE CMS has Weak Random Number Generator in Password Generation Function

Tue, 09 Dec 2025 03:31:17 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-14261: Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges

Mon, 08 Dec 2025 18:12:46 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32898: KDE Connect verification-code protocol: The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and…

Fri, 05 Dec 2025 00:00:00 GMT

CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-62774: Mercku M6a: On Mercku M6a devices through 2.1.0, the authentication system uses predictable session…

Wed, 22 Oct 2025 00:00:00 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-58040: Crypt::RandomEncryption for Perl uses insecure rand() function during encryption

Mon, 29 Sep 2025 23:54:22 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

TYPO3 CMS uses insufficient entropy when generating passwords

Tue, 09 Sep 2025 09:31:12 GMT

typo3/cms-core >=12.0.0, <12.4.37 || >=13.0.0, <13.4.18, fixed in 12.4.37, 13.4.18. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

The Thinbus Javascript Secure Remote Password (SRP) Client Generates Fewer Bits of Entropy Than Intended

Wed, 06 Aug 2025 17:11:42 GMT

thinbus-srp <2.0.1, fixed in 2.0.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-50122: A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artif…

Fri, 11 Jul 2025 09:17:19 GMT

CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.