CWE-330

422 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 83High 141Medium 169Low 29Not scored 0

CVEs per yearBy the year they were published

CVE-2026-120223
Oray Pugongying X5 Pro Session ID session.lua session_get random values
Oray · Pugongying X5 Pro
Low2.3
CVE-2026-79981
DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofing
zephyrproject · zephyr
Medium6.5
CVE-2026-106074
A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into…
nodejs · node
Medium4.8
CVE-2026-46347
Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset
intranda · goobi-viewer-core
Medium6.8
CVE-2026-46346
Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset
intranda · goobi-viewer-core
Medium6.5
CVE-2026-55889
XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key
flatpak · xdg-desktop-portal
High8.3
CVE-2026-114576
Linksys RE6250 Web Management strcmp random values
Linksys · RE6250
Medium6.3
CVE-2026-113071
Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a…
Google · Chrome
High8.8
CVE-2026-6719
IBM Concert Software Use of Insufficiently Random Values
IBM · Concert
High7.5
CVE-2026-12272
Lightweight Cookie Notice <= 1.19 - Sensitive Information Exposure via W3TC_DYNAMIC_SECURITY Constant
daext · Lightweight Cookie Notice – Cookie Banner for Cookie Consent
Medium5.3