CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- redhat jboss operations networkThe server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which...2.1 Low
- cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM...5.8 Medium
- cisco unified computing systemThe fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video...5.8 Medium
- infohr hr human resource information systemHR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which...4.1 Medium
- dlitz pycryptoPyCrypto does not properly reseed PRNG before allowing access4.3 Medium
- cisco adaptive security appliance softwareThe IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7),...7.1 High
- ovislink airlive poe2600hd, airlive od-2025hd, airlive od-2060hd +3 more +5 moreAirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly...7.8 High
- process-one ejabberdThe TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes...4.3 Medium
- gnupgGnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage...5.8 Medium
- ruby-lang ruby, rubygems +1 moreRubyGems Regular Expression Denial of Service4.3 Medium
- ruby-lang ruby, rubygems, redhat enterprise linux +2 moreRubyGems Regular Expression Denial of Service vulnerability4.3 Medium
- polarsslThe RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery...4.3 Medium
- hp color laserjet cm4540, laserjet m4555, scanjet enterprise 8500fn1 +19 more +21 moreHP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP...4.3 Medium
- baramundi management suiteThe OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in...7.8 High
- baramundi management suiteBaramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and...7.8 High
- iij seil\%2fb1 firmware, seil\%2fneu 2fe plus firmware, seil\%2fturbo firmware +9 more +11 moreThe PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80,...4.0 Medium
- owasp enterprise security apiMissing Cryptographic Step in OWASP Enterprise Security API for Java5.8 Medium
- owasp enterprise security apiMissing Cryptographic Step in OWASP Enterprise Security API for Java2.6 Low
- redhat jboss enterprise application platformPicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local...1.9 Low
- linux kernelThe IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data...5.0 Medium
- cisco unified computing systemThe KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509...5.8 Medium
- cisco socialmineradministration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information...5.0 Medium
- prosoft-technology radiolinx controlscapeProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding...9.3 High
- ibm rational policy testerIBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers...6.8 Medium
- ibm security appscanThe SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites...5.0 Medium
- cisco jabberCisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in...4.3 Medium
- open-xchange serverOXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before...5.8 Medium
- kde kde-workspace, sc, opensuse +2 moreKDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17...5.0 Medium
- paloaltonetworks globalprotect, netconnect +1 morePalo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates...5.8 Medium
- schneider-electric tburjr900, tburjr900 firmware +1 moreSchneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3...9.3 High
- intel wimax network serviceThe InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source...2.1 Low
- intel wimax network serviceThe OSAL_Crypt_SetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services...2.1 Low
- yahoo japan shoppingThe Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509...5.8 Medium
- yahoo yafuoku\!The Yahoo! Japan Yafuoku! application 4.3.0 and earlier for iOS and Android does not verify X.509...5.8 Medium
- apache santuario xml security for javaInefficient Algorithmic Complexity in Apache Santuario XML Security4.3 Medium
- apache cxf, redhat jboss enterprise application platform, jboss enterprise portal platform +3 more +5 moreInadequate Encryption Strength in Apache CXF6.4 Medium
- ibm bladecenter, flex system x220 compute node, flex system x240 compute node +27 more +29 moreThe Intelligent Platform Management Interface (IPMI) implementation in Integrated Management...4.0 Medium
- moxa oncell gateway g3111, oncell gateway firmware, oncell gateway g3151 +2 more +4 moreMoxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a...7.1 High
- openafs, debian linux +1 moreThe vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables...4.3 Medium
- openafs, debian linux +1 moreOpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for...4.3 Medium
- ruby-lang rubyThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1...6.8 Medium
- triplc nano-10 plc, nano-10 plc firmware +1 moreTriangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an...7.8 High
- google androidAndroid 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for...9.3 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the...5.0 Medium
- digital alert systems dasdec eas, monroe electronics r189 one-net eas +1 moreThe default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the...10.0 High
- mozilla firefoxThe Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not...5.0 Medium
- fortinet forticlient, forticlient lite, forticlient ssl vpn +2 moreFortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android;...5.4 Medium
- wordpresswp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows...4.3 Medium
- huawei s2000, s3000, s3500 +15 more +17 moreThe HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management...7.5 High
- huawei acu, ar g3, atn +63 more +65 moreThe Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200,...6.5 Medium
- Show moreLoading…