Vulnerabilities > Totd Project

DATE CVE VULNERABILITY TITLE RISK
2022-08-15 CVE-2022-34294 Insufficient Entropy vulnerability in Totd Project Totd 1.5.3
totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers.
network
low complexity
totd-project CWE-331
critical
9.8
2022-06-23 CVE-2022-34295 Use of Insufficiently Random Values vulnerability in Totd Project Totd 1.5.2
totd before 1.5.3 does not properly randomize mesg IDs.
network
low complexity
totd-project CWE-330
6.5