Filtered by CWE-330
Total 303 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-7463 1 Aescrypt Project 1 Aescrypt 2017-04-28 N/A
The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.
CVE-2016-5100 1 Froxlor 1 Froxlor 2017-02-24 N/A
Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.
CVE-2016-5085 1 Animas 2 Onetouch Ping, Onetouch Ping Firmware 2016-12-24 N/A
Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then engaging in an authentication handshake.