CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- ibm rational clearquestThe ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password...4.6 Medium
- octeth oemproOcteth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the...5.0 Medium
- cisco iosThe Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other...6.8 Medium
- apple iphone osApple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the...7.5 High
- microsoft .net frameworkThe strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital...10.0 High
- apple mac os xThe default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction...5.0 Medium
- squirrelmailSquirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session,...5.0 Medium
- mantisbtMantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session...5.0 Medium
- kolab groupware serveradmin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET...4.0 Medium
- galleryGallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie...5.0 Medium
- redhat enterprise linuxyum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a...2.6 Low
- acronis true image echo serverAcronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an...5.0 Medium
- pidginThe NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it...6.8 Medium
- opensc-project openscOpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015...4.9 Medium
- emc dantz retrospect backup serverThe Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash...5.0 Medium
- ibm websphere application serverUnspecified vulnerability in Wsadmin in the System Management/Repository component in IBM...5.0 Medium
- albinoloverats anubis pluginThe Anubis (aka Anubis+Ripe160) plugin before 1.3 for encrypt stores the unencrypted file's size...6.4 Medium
- cre loaded loadedCRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent...5.0 Medium
- citrix access essentials, desktop server, presentation server +2 moreUnspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5...5.0 Medium
- ubuntu linuxThe ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys...5.0 Medium
- cdnetworks download clientThe NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download...7.5 High
- iscripts socialwareiScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent...5.0 Medium
- symantec altiris deployment solutionSymantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka...1.7 Low
- terong advanced web photo galleryTerong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a...5.0 Medium
- zyxel prestige 660, prestige 661, zynos +2 moreZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40...7.5 High
- raidsonic technology firmwareRaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an...2.1 Low
- gentoo linuxThe docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux,...1.9 Low
- linksys wrt54gThe Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which...4.0 Medium
- group logic extremez-ip file server, extremez-ip print server +1 moreExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers...5.0 Medium
- netbizcity faqmasterflexplusFAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database,...6.4 Medium
- opera browserUnspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code...10.0 High
- apple mac os x, mac os x server +1 moreSoftware Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands...9.3 High
- openssl fips object moduleThe PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding...6.4 Medium
- citrix netscalerThe web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of...4.3 Medium
- vonage motorola phone adapter vt2142-vdThe Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow...7.1 High
- globe7The Globe7 soft phone client 7.3 uses weak cryptography (reversed sequence of binary values) for...2.1 Low
- globe7The Globe7 soft phone client 7.3 sends username and password information in cleartext, which...5.0 Medium
- ibm lotus dominoIncomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7...2.1 Low
- nortel business communications manager, centrex ip client manager, centrex ip element manager +6 more +8 moreThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP...4.3 Medium
- microsoft expression mediaMicrosoft Expression Media stores the catalog password in cleartext in the catalog IVC file,...2.1 Low
- suse linuxUnspecified vulnerability in the SSL implementation in Groupwise client system in the novell...7.5 High
- suse linuxUnspecified vulnerability in the SSL implementation in Groupwise client system in the novell...6.8 Medium
- ldapscriptsldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP...2.1 Low
- emc vmware serverEMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files...2.1 Low
- linden lab second lifeArgument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as...5.0 Medium
- data-vision remotedocs r-viewerRemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files...1.9 Low
- data-vision remotedocs r-viewerUnspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote...9.3 High
- axis 207w network cameraThe AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might...4.9 Medium
- axis 207w cameraThe AXIS 207W camera uses a base64-encoded cleartext username and password for authentication,...9.3 High
- backup manager managerbackup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username,...2.1 Low
- Show moreLoading…