CWE-335
CVEs classified under CWE-335, newest first.
4 CVEsRSS
CVE-2026-106074Medium· 4.8PoCnodejs: nodejs: predictable random values via snapshot entropy cache reuse (CVE-2026-106074)
A flaw was found in Node.js crypto. Internal entropy caches used by crypto.randomUUID(), crypto.randomUUIDv7(), and crypto.randomInt() can be saved into user-land startup snapshots (--build-snapshot) and single executable applications buil…
CVE-2026-11730Medium· 5.4Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated admi…
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated admi…
CVE-2022-31008High· 7.5⚖ disputedrabbitmq-server: URI encryption with predictable secret seed (CVE-2022-31008)
A flaw was found in RabbitMQ. The shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. In certain exceptions related to Shovel …
CVE-2018-14647High· 7.5⚖ disputedPython's elementtree C accelerator failed to initialise Expat's hash salt during initialization
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological has…