CWE-335.

Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state

• randombit botan
• CWE-335

Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models

• NETGEAR EX3700
• NETGEAR EX6120
• CWE-335

RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins

• Weak cryptography or TLS
• CWE-335

>=3.8.0, <3.8.32 || >=3.9.0, <3.9.18 || >=3.10.0, <3.10.2 · fixed in 3.8.32, 3.9.18, 3.10.2

Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes

• DAVIDO Bytes::Random::Secure::Tiny
• CWE-335

Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes

• DAVIDO Bytes::Random::Secure
• CWE-335

CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking

• MIK CryptX
• Weak cryptography or TLS
• CWE-335

Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).

• CWE-335

Fault injection attack with ML-DSA and ML-KEM on ARM

• wolfSSL Inc. wolfSSL (wolfCrypt)
• CWE-335

Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communic…

• Gallagher High Sec End of Line Module
• CWE-335

NIH BRICS: NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67…

• NIH BRICS
• CWE-335

Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator

• CWE-335

<=2.3.0 · no fixed version yet

ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG).

• CWE-335

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which m…

• CWE-335

Insufficient seeding of random number generator

• Secomea GateManager
• CWE-335

An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.

• CWE-335

Cryptographically weak PRNG in Opinio 7.22

• Objectplanet Opinio
• CWE-335

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.

• CWE-335

Fastly Compute@Edge JS Runtime has fixed random number seed during compilation

• Weak cryptography or TLS
• CWE-335

>=0.4.0, <0.5.3 · fixed in 0.5.3

Insecure PRNG use in random_password_generator

• Weak cryptography or TLS
• CWE-335

<=1.0.0 · no fixed version yet

Cryptographic Issues in ECK

• CWE-335

<1.1.0 · fixed in 1.1.0

Piwigo is image gallery software written in PHP.

• Piwigo
• CWE-335

Telenot complex: Insecure AES Key Generation

• Telenot Electronic GmbH CompasX
• CWE-335

Insecure random number generation in keypair

• CWE-335

<1.0.4 · fixed in 1.0.4

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.

• Python
• CWE-335
• CWE-665

An issue was discovered on the D-Link DWR-932B router.

• Weak cryptography or TLS
• CWE-335