Search Vulnerabilities

RustCrypto SM2-PKE has 32-bit Biased Nonce Vulnerability

Arteco Web Client DVR/NVR Session ID Brute Force Authentication Bypass

QNO Technology｜VPN Firewall - Insufficient Entropy

WBCE CMS has Weak Random Number Generator in Password Generation Function

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks

On Mercku M6a devices through 2

Crypt::RandomEncryption for Perl uses insecure rand() function during encryption

Insufficient Entropy in Password Generation

Thinbus generates insufficient entropy: 252 bits vs minimum 256 bits

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse eng...

D-Link DCS-6517/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropy

Meshtastic Repeated Public and Private Keypairs

Rallly Insufficient Password Login Token Entropy Leads to Account Takeover

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default

Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions

Net::Xero 0.044 and earlier for Perl uses insecure rand() function for cryptographic functions

WebService::Xero 0.11 for Perl uses insecure rand() function for cryptographic functions

Net::Dropbox::API 1.9 and earlier for Perl uses insecure rand() function for cryptographic functions