CWE-1241

CVEs per yearBy the year they were published

1. 20171
2. 20212
3. 20231
4. 20268

Newest CVEs

• CVE-2026-82190

  Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  Medium6.3
• CVE-2026-82191

  Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  Medium5.3
• CVE-2026-73576

  In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The…

  Zimbra · Collaboration

  Medium6.3
• CVE-2026-57869

  Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents…

  MicroRealEstate · MicroRealEstate

  High7.1
• CVE-2026-6420

  Keylime: keylime: security bypass due to hardcoded tpm quote nonce

  keylime

  Medium6.3
• CVE-2026-26018

  CoreDNS Loop Detection Denial of Service Vulnerability

  coredns · coredns

  High7.5
• CVE-2025-13079

  Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens

  popupbuilder · Popup Builder – Create highly converting, mobile friendly marketing popups.

  Medium5.3
• CVE-2025-32056

  Anti-Theft Bypass for Infotainment ECU

  Bosch · Infotainment system ECU

  Medium4.0
• CVE-2023-4695

  Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib

  pkp · pkp/pkp-lib

  Critical9.6
• CVE-2021-3692

  Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2

  yiisoft · yiisoft/yii2

  High8.1

Vendors it comes up for most

1. j2commerce.com2
2. yiisoft2
3. Bosch1
4. MicroRealEstate1
5. Red Hat1
6. Zimbra1
7. coredns1
8. pkp1
9. popupbuilder1