CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- cisco unified communications managerThe Remote Mobile Access Subsystem in Cisco Unified Communications Manager (CM) 10.0(1) and...4.3 Medium
- hp helion cloud development platformThe Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a...10.0 High
- gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...5.0 Medium
- sap commoncryptolib, hana, netweaver +2 more +4 moreSAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP...7.5 High
- joomla joomla\!Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3...7.5 High
- plone, zope +1 morePlone and Zope2 do not reseed pseudo-random number generator5.0 Medium
- linksys e4200v2, ea2700, ea3500 +17 more +19 moreLinksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2...3.3 Low
- citrix xenmobileCitrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not...5.0 Medium
- hijabmodern hijab modernThe Hijab Modern (aka com.Aisyaidea.HijabModern) application 1.0 for Android does not verify X...5.4 Medium
- mcafee network data loss preventionThe TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher...6.5 Medium
- mcafee network data loss preventionMcAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which...2.1 Low
- ibm tivoli composite application manager for transactionsThe Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for...4.3 Medium
- f5 big-ip analyticsF5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier...7.5 High
- igniterealtime smack api, redhat jboss fuse +1 moreThe Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is...6.8 Medium
- emc avamarEMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition ...4.3 Medium
- not yet commons ssl project yet commons sslImproper Validation of Certificate with Host Mismatch in Not Yet Commons SSL6.8 Medium
- process-one ejabberdejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used,...5.0 Medium
- pidgin, canonical ubuntu linux, debian linux +1 more +3 moreThe (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in...6.4 Medium
- redhat virtual desktop service managerVDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL...5.0 Medium
- apple iphone osiCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers,...6.8 Medium
- apple iphone osHouse Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which...1.9 Low
- apptreestudios gangsta auto thief iiiThe Gangsta Auto Thief III (aka com.apptreestudios.gdup3) application 1.1 for Android does not...5.4 Medium
- onesolutionapps woodward bailThe Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) application 1.1 for Android does...5.4 Medium
- appa-apps top roller coasters europe 2The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2)...5.4 Medium
- daily green project greenThe Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not...5.4 Medium
- squishy birds project birdsThe Squishy birds (aka com.tatmob.squishybirds) application 1.0.1 for Android does not verify X...5.4 Medium
- enyetech coca-cola fm brasilThe Coca-Cola FM Brasil (aka com.enyetech.radio.coca_cola.fm_br) application 2.0.41709 for...5.4 Medium
- gotobestofprice thai foodThe Thai food (aka com.foods.thaifood) application 1.0 for Android does not verify X.509...5.4 Medium
- nobexrc house365 radioThe House365 Radio (aka com.nobexinc.wls_27853803.rc) application 3.2.3 for Android does not...5.4 Medium
- itp harpers bazaar artThe Harpers Bazaar Art (aka com.itp.harpersart) application @7F080181 for Android does not verify...5.4 Medium
- narr8 knights of the voidThe Knights of the Void (aka me.narr8.android.serial.knights_of_the_void) application 2.1.7 for...5.4 Medium
- cb - calciatori brutti project - calciatori bruttiThe CB - Calciatori Brutti (aka com.calciatori.brutti) application 1.0 for Android does not...5.4 Medium
- appsgeyser backyard wrestlingThe Backyard Wrestling (aka com.wBackyardWrestling) application 0.1 for Android does not verify X...5.4 Medium
- zillionmuslims zillion muslimsThe Zillion Muslims (aka com.zillionmuslims.src) application 1.1 for Android does not verify X...5.4 Medium
- best free giveaways project free giveawaysThe Best Free Giveaways (aka com.wIphone5GiveAways) application 0.1 for Android does not verify X...5.4 Medium
- synapse ishuttleThe iShuttle (aka com.synapse.ishuttle_user) application 1.0 for Android does not verify X.509...5.4 Medium
- magzter english football magazineThe English Football Magazine (aka com.magzter.englishfootball) application 3.0 for Android does...5.4 Medium
- onesolutionapps aaaa discount bailThe AAAA Discount Bail (aka com.onesolutionapps.aaaadiscountbailandroid) application 1.1 for...5.4 Medium
- magzter schon\! magazineThe Schon! Magazine (aka com.magzter.schonmagazine) application 3.0 for Android does not verify X...5.4 Medium
- billgbennett bill g. bennettThe Bill G. Bennett (aka com.billgbennett) application 1.0 for Android does not verify X.509...5.4 Medium
- macedonia hacienda hotel project hacienda hotelThe Macedonia Hacienda Hotel (aka appinventor.ai_orolimpio999.HotelMacedonia) application 1.0 for...5.4 Medium
- fallacystudios marijuana handbook lite - weedThe Marijuana Handbook Lite - Weed (aka com.fallacystudios.marijuanahandbooklite) application 3.2...5.4 Medium
- ienvisage pakistan cricket newsThe Pakistan Cricket News (aka com.conduit.app_cf18df8bdf454eb0a836e2d29886bc40.app) application...5.4 Medium
- kuran\'in bilimsel mucizeleri project bilimsel mucizeleriThe Kuran'in Bilimsel Mucizeleri (aka com.wKurannBilimselMucizeleri) application 0.1 for Android...5.4 Medium
- magzter epc worldThe Epc World (aka com.magzter.epcworld) application 3.1 for Android does not verify X.509...5.4 Medium
- gcspublishing slingshot forumThe Slingshot Forum (aka com.tapatalk.theslingshotforumcom) application 3.9.14 for Android does...5.4 Medium
- snaplion kavita ksThe Kavita KS (aka com.snaplion.kavitaks) application 2.4 for Android does not verify X.509...5.4 Medium
- magzter champak - hindiThe Champak - Hindi (aka com.magzter.champakhindi) application 3.0.1 for Android does not verify...5.4 Medium
- herbs \& flowers dictionary project \& flowers dictionaryThe Herbs & Flowers Dictionary (aka com.wHerbsNFlowersDictionary) application 0.1 for Android...5.4 Medium
- appstronautme cleveland football streamThe Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0...5.4 Medium
- Show moreLoading…