#cwe-337

共收录 4 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布INFO

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take ...

CVE-2026-18451

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation m

历史摘要 · 未重新核验 · NVD

安全公告2026-10-07 发布INFO

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token...

CVE-2026-19396

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE5

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-07 发布INFO

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive ...

CVE-2026-19396

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.

CVE-2026-66372

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding toke

历史摘要 · 未重新核验 · NVD