TYPE DE FAIBLESSE

CWE-335

11 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-335 (en anglais) →

CVE-2026-3503Les appareils utilisant la cryptographie post-quantique de wolfSSL sur des microcontrôleurs ARM Cortex-M sont susceptibles de subir une attaque par injection de fautes. Un attaquan… 4.3 MOYENNE

CVE-2025-52578Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise inter… 5.7 MOYENNE

CVE-2024-10026A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid … 6.3 MOYENNE

CVE-2024-55566ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack… 6.6 MOYENNE

CVE-2023-49343Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible … 6.0 MOYENNE

CVE-2022-40267Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with s… 5.9 MOYENNE

CVE-2022-42159D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator. 4.3 MOYENNE

CVE-2022-31008RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryp… 5.5 MOYENNE

CVE-2021-34600Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This… 5.5 MOYENNE

CVE-2021-32033Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be set… 4.6 MOYENNE

CVE-2018-12384When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the C… 5.9 MOYENNE