Vulnerabilities > Use of Insufficiently Random Values

DATE CVE VULNERABILITY TITLE RISK
2023-05-30 CVE-2022-43485 Use of Insufficiently Random Values vulnerability in Honeywell Onewireless Network Wireless Device Manager Firmware
Use of Insufficiently Random Values in Honeywell OneWireless.
network
low complexity
honeywell CWE-330
6.5
2023-05-25 CVE-2023-31124 Use of Insufficiently Random Values vulnerability in multiple products
c-ares is an asynchronous resolver library.
network
high complexity
c-ares-project fedoraproject CWE-330
3.7
2023-05-25 CVE-2023-31147 Use of Insufficiently Random Values vulnerability in multiple products
c-ares is an asynchronous resolver library.
network
low complexity
c-ares-project fedoraproject CWE-330
6.5
2023-05-03 CVE-2023-1385 Use of Insufficiently Random Values vulnerability in Amazon Fire OS
Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.lightning services. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS 7.6.3.3.
low complexity
amazon CWE-330
8.8
2023-04-29 CVE-2023-2418 Use of Insufficiently Random Values vulnerability in Konghq Kong 2.8.3
A vulnerability was found in Konga 2.8.3 on Kong.
network
high complexity
konghq CWE-330
5.9
2023-04-19 CVE-2023-30797 Use of Insufficiently Random Values vulnerability in Netflix Lemur
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials.
network
low complexity
netflix CWE-330
7.5
2023-03-31 CVE-2023-0343 Use of Insufficiently Random Values vulnerability in Akuvox E11 Firmware
Akuvox E11 contains a function that encrypts messages which are then forwarded.
network
low complexity
akuvox CWE-330
7.5
2023-03-16 CVE-2022-26080 Use of Insufficiently Random Values vulnerability in ABB products
Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.
network
low complexity
abb CWE-330
4.3
2023-03-14 CVE-2022-39216 Use of Insufficiently Random Values vulnerability in Combodo Itop
Combodo iTop is an open source, web-based IT service management platform.
network
low complexity
combodo CWE-330
critical
9.8
2023-02-23 CVE-2023-20016 Use of Insufficiently Random Values vulnerability in Cisco products
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files.
local
low complexity
cisco CWE-330
6.5