CWE-337
CWE-337 · 5 records · 2 with a public proof-of-concept
Records the NVD classes under CWE-337, highest CVSS first.
- MEDIUM 6.8CVE-2026-66372public PoC
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.
- MEDIUM 4.6CVE-2026-73794
HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)
- LOW 3.1CVE-2026-18451
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.
- UNSCOREDCVE-2026-55889public PoC
XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals gen…
- UNSCOREDCVE-2026-19396
A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an ad…