CWE-334
16 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 16Published CVEs16 of them scored
- 4Last 12 monthspublished in the last year
- 4Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-129144
paicoding 1.0.3 Payment Bypass via Guessable Codes in /article/api/pay/callback
itwanger · paicoding
Medium5.3 - CVE-2026-122118
In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used.…
Yealink · AVHub
High7.4 - CVE-2026-71851
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
brix · crypto-js
Critical9.0 - CVE-2024-54017
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All…
Siemens · SIPROTEC 5 6MD84 (CP300)
Medium6.9 - CVE-2025-3895
Low token entropy in MegaBIP
Jan Syski · MegaBIP
Critical9.1 - CVE-2024-52616
Avahi: avahi wide-area dns predictable transaction ids
avahi · avahi
Medium5.3 - CVE-2024-51720
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
BlackBerry · SecuSUITE
Medium4.8 - CVE-2024-6890
Journyx Unauthenticated Password Reset Bruteforce
Journyx · Journyx (jtime)
Critical9.8 - CVE-2023-6951
A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key…
DJI · Mavic 3 Pro
Medium6.6 - CVE-2022-24402
Intentionally weakened effective strength in TETRA TEA1
ETSI · TETRA Standard
High8.8