<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-335</title><description>Every new CWE-335 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-118765: Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state</title><link>https://agentprime.io/advisories/CVE-2026-118765/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-118765/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 17:12:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11730: Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models</title><link>https://agentprime.io/advisories/CVE-2026-11730/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11730/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 14:38:16 GMT</pubDate><category>CVE</category></item><item><title>RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins</title><link>https://agentprime.io/advisories/GHSA-v9gv-xp36-jgj8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-v9gv-xp36-jgj8/</guid><description>rabbit_common &gt;=3.8.0, &lt;3.8.32 || &gt;=3.9.0, &lt;3.9.18 || &gt;=3.10.0, &lt;3.10.2, fixed in 3.8.32, 3.9.18, 3.10.2. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Jun 2026 16:15:48 GMT</pubDate><category>Hex</category><category>rabbit_common</category></item><item><title>CVE-2026-11702: Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes</title><link>https://agentprime.io/advisories/CVE-2026-11702/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11702/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Jun 2026 08:13:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11625: Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes</title><link>https://agentprime.io/advisories/CVE-2026-11625/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11625/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Jun 2026 08:07:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41564: CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking</title><link>https://agentprime.io/advisories/CVE-2026-41564/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41564/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Apr 2026 07:29:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25835: Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).</title><link>https://agentprime.io/advisories/CVE-2026-25835/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25835/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3503: Fault injection attack with ML-DSA and ML-KEM on ARM</title><link>https://agentprime.io/advisories/CVE-2026-3503/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3503/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Mar 2026 18:12:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52578: Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communic…</title><link>https://agentprime.io/advisories/CVE-2025-52578/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52578/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 03:26:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-27580: NIH BRICS: NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67…</title><link>https://agentprime.io/advisories/CVE-2025-27580/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-27580/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Apr 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator</title><link>https://agentprime.io/advisories/GHSA-pff9-53m5-qr56/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pff9-53m5-qr56/</guid><description>org.apache.cocoon:cocoon-forms-impl &lt;=2.3.0, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jan 2025 15:30:58 GMT</pubDate><category>Maven</category><category>org.apache.cocoon:cocoon-forms-impl</category><category>org.apache.cocoon:cocoon-sitemap-impl</category></item><item><title>CVE-2024-55566: ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG).</title><link>https://agentprime.io/advisories/CVE-2024-55566/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-55566/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Dec 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-36048: QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which m…</title><link>https://agentprime.io/advisories/CVE-2024-36048/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36048/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 May 2024 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-1579: Insufficient seeding of random number generator</title><link>https://agentprime.io/advisories/CVE-2024-1579/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1579/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Apr 2024 13:27:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-27632: An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.</title><link>https://agentprime.io/advisories/CVE-2024-27632/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-27632/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4472: Cryptographically weak PRNG in Opinio 7.22</title><link>https://agentprime.io/advisories/CVE-2023-4472/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4472/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Feb 2024 22:11:21 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-42159: D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.</title><link>https://agentprime.io/advisories/CVE-2022-42159/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-42159/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>Fastly Compute@Edge JS Runtime has fixed random number seed during compilation</title><link>https://agentprime.io/advisories/GHSA-cmr8-5w4c-44v8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-cmr8-5w4c-44v8/</guid><description>@fastly/js-compute &gt;=0.4.0, &lt;0.5.3, fixed in 0.5.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Sep 2022 20:45:10 GMT</pubDate><category>npm</category><category>@fastly/js-compute</category></item><item><title>Insecure PRNG use in random_password_generator</title><link>https://agentprime.io/advisories/GHSA-ggfx-h9xj-5v9c/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-ggfx-h9xj-5v9c/</guid><description>random_password_generator &lt;=1.0.0, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 19 May 2022 00:00:40 GMT</pubDate><category>RubyGems</category><category>random_password_generator</category></item><item><title>Cryptographic Issues in ECK</title><link>https://agentprime.io/advisories/GHSA-vfp4-xx6m-7vf6/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vfp4-xx6m-7vf6/</guid><description>github.com/elastic/cloud-on-k8s &lt;1.1.0, fixed in 1.1.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Feb 2022 01:57:18 GMT</pubDate><category>Go</category><category>github.com/elastic/cloud-on-k8s</category></item><item><title>CVE-2016-3735: Piwigo is image gallery software written in PHP.</title><link>https://agentprime.io/advisories/CVE-2016-3735/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2016-3735/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jan 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34600: Telenot complex: Insecure AES Key Generation</title><link>https://agentprime.io/advisories/CVE-2021-34600/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34600/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Jan 2022 11:40:11 GMT</pubDate><category>CVE</category></item><item><title>Insecure random number generation in keypair</title><link>https://agentprime.io/advisories/GHSA-3f99-hvg4-qjwj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3f99-hvg4-qjwj/</guid><description>keypair &lt;1.0.4, fixed in 1.0.4. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Oct 2021 17:09:05 GMT</pubDate><category>npm</category><category>keypair</category></item><item><title>CVE-2018-14647: Python&apos;s elementtree C accelerator failed to initialise Expat&apos;s hash salt during initialization.</title><link>https://agentprime.io/advisories/CVE-2018-14647/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-14647/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Sep 2018 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2016-10180: An issue was discovered on the D-Link DWR-932B router.</title><link>https://agentprime.io/advisories/CVE-2016-10180/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2016-10180/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Jan 2017 04:24:00 GMT</pubDate><category>CVE</category></item></channel></rss>