67 matches found
Spring Boot: Spring Boot: Weak pseudo-random number generation can lead to information disclosure.
A flaw was found in Spring Boot. The $random.value property source utilizes a weak pseudo-random number generator PRNG, meaning the values it produces are not sufficiently random for use as cryptographic secrets. An attacker could potentially predict these values, which may lead to information...
CVE-2026-3290
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values...
CVE-2026-3290
CVE-2026-3290 affects the HRNG in the RS9116. When power-save mode is enabled, timing limitations produce predictable random values, as described in the connected records. The CVSS 4.0 vector indicates high impact on confidentiality and integrity with adjacent access and no privileges, and passiv...
EUVD-2026-30381
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values...
CVE-2026-3290 Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values...
CVE-2026-3290 Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values...
PT-2026-41021
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values...
USN-7976-1: Form-Data vulnerability
Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this issue to make arbitrary requests to internal systems...
GO-2025-4208 Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils
Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils...
EUVD-2025-201791
Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...
CVE-2025-66565
Fiber Utils (github.com/gofiber/utils) has a vulnerability in UUIDv4() and UUID() where crypto/rand.Read() failures trigger silent fallbacks to predictable UUID values, including the zero UUID 00000000-0000-0000-0000-000000000000. This root cause affects versions up to 2.0.0-rc.3; the issue is fi...
EUVD-2001-1416
Malware in sbrugna...
EUVD-2009-4294
Malware in sbrugna...
EUVD-2022-29791
Malicious code in bioql PyPI...
EUVD-2025-21938
Malicious code in bioql PyPI...
EUVD-2023-40555
Malicious code in bioql PyPI...
EUVD-2022-32805
Malicious code in bioql PyPI...
Allegra 授权问题漏洞
Allegra is a project management software for mid-sized organizations from Allegra. An authorization issue vulnerability exists in Allegra that stems from a password recovery mechanism that relies on predictable values, which could lead to authentication bypass...
CVE-2024-4772
An HTTP digest authentication nonce value was generated using rand which could lead to predictable values. This vulnerability affects Firefox 126...
CVE-2022-25047
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values...