Cwe 338

🛡 このタグに関連する脆弱性 72

ID	タイトル	重要度	検知
CVE-2026-107612	脆弱性情報 (CVE-2026-107612)	High	1週間前
CVE-2026-107283	org.asynchttpclient:async-http-client の脆弱性 (CVE-2026-107283)	Low	1週間前
CVE-2026-104356	PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the…	Medium	2週間前
CVE-2026-53953	GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In…	Critical	2週間前
CVE-2026-9864	Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility…	Medium	2週間前
CVE-2026-79901	In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory…	Critical	2週間前
CVE-2026-94456	Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The…	Critical	3週間前
CVE-2026-94107	NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that…	High	3週間前
CVE-2026-93868	Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php…	High	4週間前
CVE-2026-92749	SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded...	High	1ヶ月前
CVE-2026-92298	EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in,...	Medium	1ヶ月前
CVE-2026-74887	Jahlives の脆弱性 (CVE-2026-74887)	Low	2ヶ月前
CVE-2026-74874	Jahlives の脆弱性 (CVE-2026-74874)	High	2ヶ月前
CVE-2026-18611	A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an...	High	2ヶ月前
CVE-2026-71851	crypto-js の脆弱性 (CVE-2026-71851)	Critical	2ヶ月前
CVE-2026-9205	langflow の脆弱性 (CVE-2026-9205)	High	2ヶ月前
CVE-2026-47882	Broadcom Spring Tools の脆弱性 (CVE-2026-47882)	High	2ヶ月前
CVE-2026-73567	sm-crypto の脆弱性 (CVE-2026-73567)	Critical	2ヶ月前
CVE-2026-64798	Persistent URL login keys were also generated using a non-cryptographic random generator with...	Critical	2ヶ月前
CVE-2026-16615	A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand...	Medium	2ヶ月前
CVE-2026-8169	ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug...		2ヶ月前
CVE-2026-13577	Dancer2 versions through 2.1.0 for Perl generate insecure session ids when CSPRNG modules are...	High	2ヶ月前
CVE-2026-16235	Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These...	Critical	2ヶ月前
CVE-2026-9323	The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id)...	High	2ヶ月前
CVE-2026-13082	GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method...	Medium	3ヶ月前
CVE-2026-63089	WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one...	Critical	3ヶ月前
CVE-2026-61500	Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic...	Critical	3ヶ月前
CVE-2026-14495	WordPress の脆弱性 (CVE-2026-14495)	High	3ヶ月前
CVE-2026-56016	CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low...	Medium	3ヶ月前
CVE-2026-7830	Uvnc の脆弱性 (CVE-2026-7830)	High	3ヶ月前