Advisories · Weakness
CWE-337.
Every Advisory and CVE whose sources give the weakness CWE-337, newest first.
- CVSS 3.1 Low
Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
- SMCI MBD-X12SPI
- CWE-337
- CVSS 8.3 High
XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key
- flatpak xdg-desktop-portal
- Weak cryptography or TLS
- CWE-337
- CVSS 4.6 Medium
HPE NonStop MODULAR NSJ - Vulnerability in Random Number Generation
- Hewlett Packard Enterprise HPE NonStop MODULAR NSJ
- CWE-337
- CVSS 7.7 High
ASUS Router: A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing…
- ASUS Router
- CWE-337
- CVSS 7.6 High
Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups
- Digital Watchdog VMAX A1 G4 DVR
- Digital Watchdog VMAX IP G4 NVR
- CWE-337
- CVSS 7.5 High
CoreDNS Loop Detection Denial of Service Vulnerability
- Denial of service
- CWE-337
<1.14.2 · fixed in 1.14.2
GHSA-h75p-j8xm-m278 · CVE-2026-26018 - CVSS 8.2 High
PEAR Has a Predictable Verification Hash in Election Account Requests
- pearweb
- CWE-337
- CVSS 5.9 Medium
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
- CWE-337
<=23.3 · no fixed version yet
GHSA-gr7h-xw4f-wh86 · CVE-2025-62710 - CVSS 8.7 High
AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator
- AutomationDirect CLICK PLUS C0-0x CPU firmware
- AutomationDirect CLICK PLUS C0-1x CPU firmware
- CWE-337
- CVSS 2.0 Low
Intel(R) TDX: Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some…
- Intel(R) TDX
- CWE-337
- CVSS 8.7 High
Predictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect Advanced
- Tigo Energy Cloud Connect Advanced
- CWE-337
- CVSS 8.7 High
JUJU_CONTEXT_ID is a predictable authentication secret in github.com/juju/juju
- Hard-coded credentials
- CWE-337
<0.0.0-20240826044107-ecd7e2d0e986 · fixed in 0.0.0-20240826044107-ecd7e2d0e986
GHSA-mh98-763h-m9v4 · CVE-2024-7558 - CVSS 8.7 High
Duplicate Advisory: Juju makes Use of Weak Credentials
- Weak cryptography or TLS
- Hard-coded credentials
<0.0.0-20241001032836-2af7bd8e310b · fixed in 0.0.0-20241001032836-2af7bd8e310b
GHSA-phh4-3hmm-24rx - CVSS 2.2 Low
cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
- CWE-215
- CWE-337
>=0.5.0, <0.5.1 || >=0.6.0, <0.6.1 || >=0.7.0, <0.7.1 || >=0.8.0, <0.8.1 || >=0.9.0, <0.9.1 || >=0.10.0, <0.10.1 || >=0.11.0, <0.11.1 || >=0.12.0, <0.12.1 || >=0.13.0, <0.13.1 || >=0.14.0, <0.14.1 · fixed in 0.5.1, 0.6.1, 0.7.1, 0.8.1, 0.9.1, 0.10.1, 0.11.1, 0.12.1, 0.13.1, 0.14.1
GHSA-rgrf-6mf5-m882 · CVE-2024-22194 - CVSS 6.0 Medium
Resource exposure in Ubuntu Budgie Budgie Extras
- Ubuntu Budgie Budgie Extras
- Information disclosure
- CWE-337
- CVSS 5.9 Medium
Authentication Bypass Vulnerability in Web Server Function on MELSEC Series
- Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
- Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ES
- CWE-337
- CVSS 3.7 Low
enigmaX Scrambling Table main.c getSeed prng seed
- enigmaX
- CWE-337
- CVSS 8.1 High
Dell PowerScale OneFS: Dell PowerScale OneFS, versions 8.2.x-9.3.x…
- Dell PowerScale OneFS
- CWE-337
- CVSS 9.8 CriticalCritical · CVSS 9+
Epignosis: A predictable seed vulnerability exists in the password reset functionality of Epignosis…
- Epignosis
- CWE-337