CWE-337

Total CVEs
6
Vulnerabilities
Avg CVSS v3
8.4
High
Avg CVSS v2
5.0
Medium
Latest CVE
2024
Most Recent

Severity Distribution

Critical 3
50%
High 2
33.3%
Medium 1
16.7%
Low 0
0%

External References

All CVEs (6)

Page 1 of 1
CVSS:9.8(Critical)

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an...

CVSS:9.8(Critical)

A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An...

CVSS:9.1(Critical)

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X****...

CVSS:8.7(High)

JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an...

CVSS:7.8(High)

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has ...

CVSS:5.3(Medium)

A vulnerability, which was classified as problematic, has been found in enigmaX up to 2.2. This issue affects the function getSeed of the file main.c of the component Scrambling Table Handler. The man...