CWE-335

CWE-335 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-335, highest CVSS first.

  1. MEDIUM 5.4CVE-2026-117302026-10-13

    Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on th…

    AI risk analysis on Exploit-DB.ai →

  2. UNSCOREDCVE-2025-299412026-11-10

    Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-118765public PoC2026-10-29

    Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeeded_RNG to mark itself seeded without consulti…

    AI risk analysis on Exploit-DB.ai →