CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- cisco email security appliance, web security appliance, content security management appliance +2 moreA vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security...5.9 Medium
- wolfsslThe C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 Medium
- wolfsslThe C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 Medium
- phpmyadminphpMyAdmin Cryptographic Vulnerability5.3 Medium
- ibm connectionsIBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which...3.7 Low
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength,...3.7 Low
- lenovo bios, notebook 110 14ibr bios, notebook 110 15ibr bios +27 more +29 moreA vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...4.4 Medium
- bitcoin knots project knotsIn Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1...6.2 Medium
- animas onetouch ping firmwareJohnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which...7.5 High
- bb\&t the uThe U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL...5.4 Medium
- ibm security privileged identity manager virtual applianceIBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows...7.5 High
- apple itunes, safari, iphone os +2 moreWKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10...6.8 Medium
- apple os x serverServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow...7.5 High
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...8.6 High
- pivotal software operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or...9.8 Critical
- openvpnOpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain...5.9 Medium
- hp integrated lights-out 3 firmwareThe TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not...3.7 Low
- huawei rh1288 v3 server firmware, rh2288 v3 server firmware, rh2288h v3 server firmware +4 more +6 moreThe Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software...7.5 High
- huawei ch121 v3 server firmware, ch140 v3 server firmware, ch220 v3 server firmware +6 more +8 moreHuawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with...7.5 High
- jose-php project jose-phpThe RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1...5.3 Medium
- phpmyadminAn issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username...8.1 High
- haxx libcurl, debian linux, opensuse leap +2 morecurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 High
- amazonbasics firmware, dell km632 firmware, km714 firmware +2 more +4 moreThe firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless,...6.5 Medium
- intel crosswalkIntel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, and 22.x...8.1 High
- blue coat packetshaper s-seriesThe HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote...8.1 High
- fonality, fonality hud web +1 moreThe Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14...7.5 High
- citrix ios receiverCitrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly...6.1 Medium
- huawei hilink appThe Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates,...5.5 Medium
- abb pcm600ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary...6.5 Medium
- abb pcm600ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which...2.8 Low
- kmc controls bac-5051e firmwareKMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass...5.3 Medium
- sensiolabs symfony, debian linux +1 moreSymfony Cryptographic Vulnerability7.5 High
- php, canonical ubuntu linux +1 moreThe openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x...7.5 High
- opensslcrypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed...7.5 High
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...5.9 Medium
- linux kernelThe asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows...4.7 Medium
- botan project botanThe Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses...7.5 High
- systech syslink sl-1000 modular gateway firmwareSysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use...7.5 High
- ecava integraxorThe HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain...7.5 High
- hexchat project hexchat, xchat, xchat gnome +1 more +3 moreThe ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME...6.5 Medium
- libreswan, fedoraproject fedora +1 moreLibreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an...7.5 High
- juniper junosJuniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on...5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509...7.4 High
- proftpd, fedoraproject fedora, opensuse +2 moreThe mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle...7.5 High
- apple watchos, iphone os, mac os x +2 moreMessages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly...5.9 Medium
- apple mac os x serverWeb Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for...7.5 High
- apple software updateApple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in...5.9 Medium
- openssl, pulsesecure client, steel belted radius +2 moreThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...5.9 Medium
- ibm security access manager 9.0 firmware, security access manager for web 7.0 firmware, security access manager for web 8.0 firmware +2 moreThe SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8...7.5 High
- openssl, oracle exalogic infrastructure, oss support tools +3 more +5 moressl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of...5.9 Medium
- Show moreLoading…