CVE-2009-3278: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack...

CVE-2009-3238: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The getrandomint function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to...

CVE-2008-5913: Undefined Security Weakness

The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a...

CVE-2008-4102: Undefined Security Weakness

Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseudo-random values produced by PHP's mtrand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008-3681...

Trend Micro multiple application authentication bypass

Weak PRNG generator is used to generate session cookie...

PowerDNS DNS cache poisoning attack

Weak PRNG generator allows cache poisoning attack...

Jetty web server weak pseudo-random number generator

Weak PRNG generator is used for session cookie making it's possible to spoof the session id...

Mozilla Firefox weak PRNG generator

Weak PRNG generator is used to generate temporary files names for XMLHttpRequest. It may be used to access content of local files by creating temporary HTML file with predictable name...