CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- apache xml security for c\+\+The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML...4.3 Medium
- faircom c-treeaceThe Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not...7.1 High
- juniper junos pulse access control service, junos pulse secure access service +1 moreJuniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1...4.3 Medium
- pizzahut pizza hut japan official order applicationThe Pizza Hut Japan Official Order application before 1.1.1.a for Android does not verify X.509...5.8 Medium
- filemaker pro, pro advanced +1 moreFileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL...5.8 Medium
- cisco nexus 1000v, nx-os +1 moreThe SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509...5.8 Medium
- cisco nx-osThe encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual...5.8 Medium
- ibm infosphere optim data growth for oracle e-business suiteIBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3...4.3 Medium
- rsa authentication api, authentication agent, pluggable authentication module agent +1 more +3 moreEMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA...2.1 Low
- ibm xiv storage system gen3IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for...4.3 Medium
- puppet enterprise, puppetlabs puppet +1 morePuppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client...5.0 Medium
- ibm ims enterprise suiteThe login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext...5.0 Medium
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly...4.3 Medium
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly...4.3 Medium
- opensslThe Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap...1.9 Low
- lighttpdThe configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux...1.9 Low
- linux kernel, redhat enterprise mrg +1 moreThe crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user...2.1 Low
- linux kernel, redhat enterprise mrg +1 moreThe crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user...2.1 Low
- linux kernel, redhat enterprise mrg +1 moreThe report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an...2.1 Low
- cisco network admission controlThe Cisco Network Admission Control (NAC) agent on Mac OS X does not verify the X.509 certificate...5.8 Medium
- redhat openshift, openshift origin +1 morerhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the...2.1 Low
- qt, canonical ubuntu linux, opensuse +2 moreThe QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5,...4.3 Medium
- linux kernelThe CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local...4.0 Medium
- linux kernelThe CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local...4.0 Medium
- moxa edr-g903, edr g903 firmware +1 moreMoxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy...7.6 High
- bouncycastle bc-java, legion-of-the-bouncy-castle-c\#-cryptography-api +1 moreImproper Input Validation in Bouncy Castle4.0 Medium
- yassl cyasslThe TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing...4.3 Medium
- opera browserThe TLS implementation in Opera before 12.13 does not properly consider timing side-channel...4.0 Medium
- opensslcrypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2...5.0 Medium
- gnu gnutlsThe TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does...4.0 Medium
- wiresharkThe dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in...2.9 Low
- redhat freeipaThe client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification...7.9 High
- tripadvisorThe TripAdvisor app 6.6 for iOS sends cleartext credentials, which allows remote attackers to...5.0 Medium
- redhat enterprise virtualization managerThe vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a...6.8 Medium
- belkin n900 wireless routerThe WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6...3.3 Low
- canonical ubuntu linux, debian linux, google android +1 more +3 moreExpat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes...5.9 Medium
- tropos mesh os, 1310 distrubution automation mesh router, 1410 mesh router +6 more +8 moreTropos Wireless Mesh Routers Insufficient Entropy6.1
- invensys wonderware intouch, siemens processsuite +1 moreInvensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption...1.9 Low
- layton technology helpboxLayton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page...5.0 Medium
- post oak traffic systems awam bluetooth reader traffic system, postoaktraffic awam bluetooth reader +1 morePost Oak Bluetooth Traffic Systems Insufficient Entropy7.6
- python keyringPython Keyring does not securely initialize encryption cipher2.1 Low
- google cityhashGoogle CityHash computes hash values without properly restricting the ability to trigger hash...5.0 Medium
- oracle jdk, openjdk, jre +2 moreOracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly...5.0 Medium
- rubiniusRubinius computes hash values without properly restricting the ability to trigger hash collisions...5.0 Medium
- ruby-lang rubyRuby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without...5.0 Medium
- jrubyJRuby denial of service via Hash Collision5.0 Medium
- oracle jdk, openjdk, jre +2 moreOracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39,...5.0 Medium
- emc it operations intelligenceEMC Smarts Network Configuration Manager (NCM) before 9.1 uses a hardcoded encryption key for the...2.1 Low
- redhat jboss enterprise data services platformThe Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services...4.3 Medium
- redhat jboss enterprise portal platformThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...5.0 Medium
- Show moreLoading…