Vulnerability Intelligence

Formal CVE and GitHub Security Advisories that affect wallet entropy, seed or private-key generation, or closely related libraries. Inclusion means the advisory is official and in scope — not that EntropyWatch re-tested the issue against a particular wallet.

66tracked advisories

2026-10-07newest disclosure

2026-10-17last ingest (succeeded)

57entropy-related

Published	ID	Title	Severity	Class
2019-07-16	CVE-2019-13603	An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5.	medium	entropy	Advisory →
2019-05-03	CVE-2019-1715	A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and C	high	entropy	Advisory →
2018-12-09	CVE-2018-19983	An issue was discovered on Sigma Design Z-Wave S0 through S2 devices.	medium	entropy	Advisory →
2018-06-04	CVE-2017-16031	Socket.io is a realtime application framework that provides communication via websockets.	high	entropy	Advisory →
2017-12-29	CVE-2017-17910	On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission.	medium	entropy	Advisory →
2017-10-17	CVE-2017-13078	Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames	medium	entropy	Advisory →
2017-10-17	CVE-2017-13087	Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Resp	medium	entropy	Advisory →
2017-10-17	CVE-2017-13081	Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attack	medium	entropy	Advisory →
2017-10-17	CVE-2017-13084	Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radi	medium	entropy	Advisory →
2017-10-17	CVE-2017-13086	Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio ran	medium	entropy	Advisory →
2017-10-17	CVE-2017-13082	Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) h	high	entropy	Advisory →
2017-10-17	CVE-2017-13088	Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Slee	medium	entropy	Advisory →
2017-10-17	CVE-2017-13080	Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames	medium	entropy	Advisory →
2017-10-17	CVE-2017-13079	Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacke	medium	entropy	Advisory →
2017-10-17	CVE-2017-13077	Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio r	medium	entropy	Advisory →
2016-12-23	CVE-2016-9154	Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and	high	entropy	Advisory →

Data is republished from the NVD, the GitHub Advisory Database, and OSV. Inclusion means the advisory is formal and in scope, not that EntropyWatch independently re-tested the issue.