Cyber Security Daily Radar

#cwe-334

共收录 4 条相关情报。

← 返回所有主题
漏洞预警2026-08-07 发布INFO

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of th...

CVE-2026-71851

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt

历史摘要 · 未重新核验 · NVD

#cve#cwe-331#cwe-334#cwe-338
安全公告2026-08-07 发布INFO

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

CVE-2026-71851

### Summary `CryptoJS.lib.WordArray.random()` in affected versions is not a cryptographically secure random number gene

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#npm#cwe-331#cwe-334#cwe-338#severity:critical
安全公告2026-08-07 发布INFO

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

CVE-2026-71851

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-331#cwe-334#cwe-338
漏洞预警2024-11-21 发布MEDIUM

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavio...

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementi

来源摘录 · NVD

#cve#cwe-334