Vulnerabilities > Lightbend > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-08-29 CVE-2018-16115 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Lightbend Akka
Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error.
network
low complexity
lightbend CWE-338
critical
9.1
2017-12-29 CVE-2014-3630 XXE vulnerability in multiple products
XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data.
network
low complexity
playframework lightbend CWE-611
critical
9.8