CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- sinapsi esolar, esolar duo, esolar light +4 more +6 moreSinapsi eSolar Hard-Coded Password10.0
- ibm websphere datapower xc10 applianceThe IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2,...4.3 Medium
- belkin n150 wireless router, n300 wireless router, n450 wireless router +1 more +3 moreBelkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2,...3.3 Low
- agilefleet fleetcommander, fleetcommander kiosk +1 moreAgile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext...5.0 Medium
- agilefleet fleetcommander, fleetcommander kiosk +1 moreAgile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password...5.0 Medium
- breezyThe Breezy application for Android does not verify that the server hostname matches a domain name...5.8 Medium
- groupon merchantsThe Groupon Redemptions application for Android does not verify that the server hostname matches...5.8 Medium
- bestpractical request trackerBest Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,...4.3 Medium
- bestpractical request trackerBest Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,...6.4 Medium
- bestpractical request trackerBest Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled...4.3 Medium
- zoner antivirus freeThe Zoner AntiVirus Free application for Android does not verify that the server hostname matches...4.3 Medium
- wellintech kingviewWellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it...2.1 Low
- banu tinyproxyTinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory...5.0 Medium
- vwar virtual warThe createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6...4.3 Medium
- pythonPython before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash...5.0 Medium
- cerberusftp ftp serverThe default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH...5.0 Medium
- trevor mckay cumin, redhat enterprise mrg +1 moreCumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...5.8 Medium
- ibm remote supervisor adapter ii firmwareIBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and...5.0 Medium
- apple iphone osUIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which...4.3 Medium
- apple iphone osOffice Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which...1.9 Low
- apple iphone osMail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address,...6.4 Medium
- apple safariApple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a...4.3 Medium
- silverstripeSilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens...5.0 Medium
- google chrome, mozilla firefox +1 moreThe SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products,...2.6 Low
- google chrome, mozilla firefox, debian linux +2 moreThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other...2.6 Low
- python beakerBeaker Sensitive Information Disclosure vulnerability4.3 Medium
- ovirt, ovirt ovirt-engine-cli, ovirt-engine-sdk 3.1.0.5 +2 moreThe python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL...5.0 Medium
- gnome at-spi2-atkThe register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not...3.3 Low
- apple iphone os, mac os x, safari +21 more +23 moreThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...3.7 Low
- opensslThe ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1...5.0 Medium
- opensslThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...4.3 Medium
- opensslOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain...5.0 Medium
- opensslThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...5.0 Medium
- opensslThe BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k...5.0 Medium
- opensslOpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce...4.3 Medium
- openssl, apple mac os x, debian linux +17 more +19 moreThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...3.4 Low
- openssl, oracle openjdk, polarssl +2 moreThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...2.6 Low
- opensslOpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform...5.0 Medium
- ibm infosphere guardiumThe datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save...5.0 Medium
- ematia elixirElixir can leak information due to weak use of crypto4.3 Medium
- comodo internet securityThe Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether...10.0 High
- comodo internet securityThe Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly...10.0 High
- nicolas cannasse ocaml xml-light libraryOCaml Xml-Light Library before r234 computes hash values without restricting the ability to...5.0 Medium
- mcafee email and web security, email gateway +1 moreMcAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee...3.5 Low
- apple remote desktopApple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting...4.3 Medium
- pawel jakub dawidek geliThe geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes...2.1 Low
- ibm websphere application serverIBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application...5.0 Medium
- redhat certificate system, dogtag certificate system +1 moreRed Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly...5.5 Medium
- canonical php5, debian linux, canonical ubuntu linux +1 more +3 moreThe Debian php_crypt_revamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3...4.3 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name...4.0 Medium
- Show moreLoading…