CVE-2024-36048

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values...

CVE-2024-36048

The QAbstractOAuth component in Qt Network Authorization is vulnerable to predictable values because it uses only the system time to seed the PRNG (Pseudo-Random Number Generator). This flaw could allow a remote attacker to bypass authentication by guessing internal values. Affected versions incl...

CVE-2024-36048

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values...

CVE-2024-4772: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

An HTTP digest authentication nonce value was generated using rand which could lead to predictable values. This vulnerability affects Firefox 126...

QtNetworkAuth -- predictable seeding of PRNG in QAbstractOAuth

Andy Shaw reports: The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG that was seeded with a predictable seed. This means that an attacker that can somehow control the time of the first OAuth1 flow of the process has a high chance of predicting the nonce used in said OAuth flo...

CVE-2024-34538: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography...

CVE-2023-50059: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galxe, the signed message lacks a nonce random number...

CVE-2024-1579

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

CVE-2024-1579 Insufficient seeding of random number generator

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

CVE-2024-1579: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

Weak Pseudo-Random Number Generator

chilkat is vulnerable to the Use Of Cryptographically Weak Pseudo-Random Number Generator PRNG. The vulnerability is due to the predictable nature of the Pseudo-Random Number Generator PRNG utilized in the ChilkatRand::randomBytes function, allowing attackers to obtain sensitive information...

CVE-2024-31497: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. This is especially important in a scenario where an adversary is able to read messages signed by PuTTY or Pageant...

Use of a Weak PseudoRandom Number Generator in EDK II Network Package

...

CVE-2024-26329

Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function...

CVE-2024-26329

Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function...

CVE-2024-26329

Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function...

CVE-2024-26329: Insufficient Entropy

Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function...

CVE-2024-26329

Chilkat versions prior to v9.5.0.98 are vulnerable to a predictable Pseudo-Random Number Generator (PRNG) . The flaw exists in the ChilkatRand::randomBytes function, where insufficient entropy allows attackers to obtain sensitive information. To resolve this issue, users should update to version ...

CVE-2024-25389: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L seed + 2531011L; return seed 16 & 0x7FFF;" in calcrandom in drivers/misc/rtrandom.c...

CVE-2024-23660: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library and consequently generates mnemonic words for which the device time is the only entropy source, leading to economic losses, as exploited in the wild in July 202...