CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- emc rsa access managerThe runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4...6.9 Medium
- ecava integraxorEcava IntegraXor Information Exposure7.5
- redhat enterprise mrgCumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based...5.0 Medium
- apache harmony, google android +1 moreThe engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony...5.0 Medium
- canonical ubuntu linux, update-manager +1 moreDistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0...6.4 Medium
- birebin birebin.com appThe Birebin.com application for Android does not verify X.509 certificates from SSL servers,...6.4 Medium
- misli misli.com appThe Misli.com application for Android does not verify X.509 certificates from SSL servers, which...6.4 Medium
- pocoproject poco c\+\+ librariesThe Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before...6.4 Medium
- yassl cyasslwolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical...5.8 Medium
- toshibacommerce 4690 point of sale operating systemThe default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS...3.0 Low
- amos benari rbovirtrbovirt uses the rest-client gem with SSL verification disabled6.8 Medium
- vmware vsphere clientVMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X...5.8 Medium
- dell bsafe micro-edition-suiteEMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not...5.8 Medium
- json-c, fedoraproject fedora +1 moreThe hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial...5.0 Medium
- ibm netezza performance portalThe (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza...3.5 Low
- haxx curl, libcurl +1 morecURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for...5.8 Medium
- ibm cognos expressIBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before...5.0 Medium
- ibm cognos expressThe server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10...5.0 Medium
- siemens simatic s7 cpu-1211c, simatic s7 cpu 1200 firmware, simatic s7 cpu 1212c +3 more +5 moreThe random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0...8.3 High
- jansson project janssonJansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions...5.0 Medium
- yumenomachi demaecanThe Demaecan application 2.1.0 and earlier for Android does not verify X.509 certificates from...5.8 Medium
- puppet enterprise, puppetlabs puppet +1 moreThe pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict...8.5 High
- powerarchiverThe Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption...5.0 Medium
- linux kernelThe keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through...5.2 Medium
- libsshThe RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset...1.9 Low
- ibm algo oneIBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo...5.0 Medium
- gnu gnutlslib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...5.8 Medium
- 7andi-fs.co denny\'sThe Denny's application before 2.0.1 for Android does not verify X.509 certificates from SSL...5.8 Medium
- apple mac os xcurl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used...4.3 Medium
- cisco unified communications managerThe certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI...6.2 Medium
- redhat jboss enterprise application platformThe security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x...1.9 Low
- suse studio extension for system z, studio onsite +1 moreSUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static"...10.0 High
- google chromeThe SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc...6.4 Medium
- belkin wemo home automation firmwareThe Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it...10.0 High
- belkin wemo home automation firmwareThe Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification...7.1 High
- belkin wemo home automation firmwareThe Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed,...7.8 High
- citrix sharefile mobile, sharefile mobile for tablets +1 moreCitrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X...5.8 Medium
- openstack swiftPython Swift client is vulnerable to Missing SSL Certificate Check5.8 Medium
- dell bsafe ssl-j, emc rsa bsafe ssl-j +1 moreThe SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2...5.0 Medium
- dell bsafe ssl-j, emc rsa bsafe ssl-j +1 moreThe (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make...5.0 Medium
- redhat sosThe sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1)...4.3 Medium
- redhat kexec-toolsThe Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1...5.7 Medium
- redhat kexec-toolsThe Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1...5.7 Medium
- redhat kexec-toolsThe SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec...5.7 Medium
- opensuse, standards based linux instrumentation project standards-based linux common information model client +1 moreinternal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability ...5.0 Medium
- siemens simatic wincc open architectureSiemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which...5.0 Medium
- red hat enterprise linux 6, enterprise linux 7, network proxy v 5.4 +3 more +5 moreSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages4.9 Medium
- openstack oslo, redhat openstack +1 moreThe python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce...4.3 Medium
- ibm qradar security information and event managerThe AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509...4.3 Medium
- zabbixlibs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x...4.3 Medium
- Show moreLoading…