CWE-330

CVEs per yearBy the year they were published

1. 20151
2. 20161
3. 201725
4. 201817
5. 201940
6. 202050
7. 202147
8. 202259
9. 202342
10. 202428
11. 202522
12. 202680

Newest CVEs

• CVE-2026-94618

  FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive

  filegator · filegator

  Medium5.4
• CVE-2026-87043

  sys_rand_get() silently returns an unwritten buffer when the entropy device is not ready

  zephyrproject · zephyr

  Medium4.8
• CVE-2026-120223

  Oray Pugongying X5 Pro Session ID session.lua session_get random values

  Oray · Pugongying X5 Pro

  Low2.3
• CVE-2026-79981

  DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofing

  zephyrproject · zephyr

  Medium6.5
• CVE-2026-106074

  A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into…

  nodejs · node

  Medium4.8
• CVE-2026-46347

  Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset

  intranda · goobi-viewer-core

  Medium6.8
• CVE-2026-46346

  Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset

  intranda · goobi-viewer-core

  Medium6.5
• CVE-2026-55889

  XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

  flatpak · xdg-desktop-portal

  High8.3
• CVE-2026-114576

  Linksys RE6250 Web Management strcmp random values

  Linksys · RE6250

  Medium6.3
• CVE-2026-113071

  Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a…

  Google · Chrome

  High8.8

Vendors it comes up for most

1. Wi-Fi Alliance9
2. Siemens8
3. Dell6
4. IBM5
5. Apache Software Foundation4
6. Cisco4
7. Spring4
8. Microsoft3
9. Qualcomm, Inc.3
10. Red Hat3