Advisories · Weakness
CWE-332.
Every Advisory and CVE whose sources give the weakness CWE-332, newest first.
- CVSS 7.4 High
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- Silicon Labs RS9116 SDK
- CWE-332
- CVSS 5.3 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-332
- CVSS 8.8 High
Golf may allow attacker to bypass CSRF protections due to weak PRNG
- Cross-site request forgery (CSRF)
- CWE-332
<0.3.0 · fixed in 0.3.0
GHSA-q9qr-jwpw-3qvv · CVE-2016-15005 - CVSS 7.5 High
Symfony Cryptographic Vulnerability
- CWE-332
>=2.3.0, <2.3.37 || >=2.4.0, <2.6.13 || >=2.7.0, <2.7.9 · fixed in 2.3.37, 2.6.13, 2.7.9
GHSA-jjx5-fq5g-8xpc · CVE-2016-1902 - CVSS 9.8 CriticalCritical · CVSS 9+
HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG
- CWE-332
<1.14.0 · fixed in 1.14.0
GHSA-r48h-jr2j-9g78 · CVE-2018-9057 - CVSS 5.3 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense (FTD) Software
- CWE-332
- CVSS 2.6 Low
In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able…
- BlackBerry QNX Software Development Platform (QNX SDP)
- CWE-332
-
Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and Desigo PX Web modu…
- Desigo PX Web modules with all firmware versions < V6.00.046
- CWE-332