CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- opera browserOpera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it...5.0 Medium
- opera browserOpera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard...5.0 Medium
- eye.fi eye-fi managerThe Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which...5.0 Medium
- pidginprotocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not...5.0 Medium
- io-socket-sslThe verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO:...4.3 Medium
- kyoceramita scanner file utilityThe Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 uses a small space of...6.4 Medium
- cisco cs-marsThe Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores...3.3 Low
- cisco aironet ap1100, aironet ap1200 +1 moreCisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data...7.8 High
- google chromeGoogle Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509...6.4 Medium
- phenotype-cms phenotype cmsPhenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it...7.5 High
- arubanetworks aruba mobility controller, arubaos +1 moreAruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the...10.0 High
- mcafee safeboot device encryptionMcAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication...2.1 Low
- siemens gigaset wlan cameraSiemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers...10.0 High
- gnu gnutlslibgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in...7.5 High
- curl libcurllib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly...7.5 High
- fetchmailsocket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in...6.4 Medium
- marc ingram servicesServices 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts...7.5 High
- marc ingram servicesServices 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all...6.5 Medium
- marc ingram servicesServices 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash...7.5 High
- strongswanThe asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3...5.0 Medium
- axesstel mv 410rThe default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption,...5.0 Medium
- mcafee smartfilterSmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and...4.6 Medium
- mozilla firefoxMozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL...9.3 High
- apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...5.0 Medium
- a-link wl54ap2, wl54ap3 +1 moreThe management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default...10.0 High
- aten kh1516i ip kvm switch, kn9116 ip kvm switch, pn9108 power over the net +2 moreThe https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP...10.0 High
- aten kh1516i ip kvm switch, kn9116 ip kvm switch +1 moreThe ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1...7.6 High
- aten kh1516i ip kvm switch, kn9116 ip kvm switch +1 moreThe (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0...10.0 High
- aten kh1516i ip kvm switch, kn9116 ip kvm switch +1 moreThe Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116...10.0 High
- mitel nupoint messengerThe server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to...7.8 High
- ubuntu linuxsystem-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in...5.0 Medium
- cisco wvc54gcThe Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores...7.8 High
- gnu gnutlsgnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509...5.0 Medium
- gnu gnutlslib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA...7.5 High
- glfusionglFusion before 1.1.3 performs authentication with a user-provided password hash instead of a...6.8 Medium
- ibm websphere application serverThe Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2...10.0 High
- sun java system identity managerSun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected...5.0 Medium
- opensc-project openscOpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements...2.1 Low
- cisco ace 4710, application control engine module +1 moreThe username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches...7.8 High
- myblogSam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent...5.0 Medium
- evolutionEvolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed...5.0 Medium
- magic2003 storagecryptStorageCrypt 2.0.1 does not properly encrypt disks, which allows local users to obtain sensitive...4.9 Medium
- sun opensolaris, solaris +1 moreThe IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun...4.9 Medium
- cisco ironport encryption appliance, ironport postx +1 morePXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7...4.3 Medium
- galeGale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal...5.0 Medium
- ietf md5The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context...5.0 Medium
- gnu classpathThe gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed...7.5 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP,"...5.0 Medium
- sun solarisThe PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain...7.8 High
- adobe acrobatAdobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for...7.5 High
- Show moreLoading…