CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- unicode project unicode, hackerone unicode node module +1 moreDownloads Resources over HTTP in unicode8.1 High
- ibm db, hackerone ibm db node module +1 moreibm_db downloads Resources over HTTP8.1 High
- baryton-saxophone project baryton-saxophone, hackerone baryton-saxophone node module +1 moreDownloads Resources over HTTP in baryton-saxophone8.1 High
- pngcrush-installer project pngcrush-installer, hackerone pngcrush-installer node module +1 morepngcrush-installer downloads Resources over HTTP8.1 High
- geoip-lite-country project geoip-lite-country, hackerone geoip-lite-country node module +1 moreDownloads Resources over HTTP in geoip-lite-country8.1 High
- product-monitor project product-monitor, hackerone product-monitor node module +1 moreDownloads Resources over HTTP in product-monitor8.1 High
- install-nw project install-nw, hackerone install-nw node module +1 moreinstall-nw downloads Resources over HTTP8.1 High
- groupon selenium-download, hackerone selenium-download node module +1 moreDownloads Resources over HTTP in selenium-download8.1 High
- aerospike, hackerone aerospike node module +1 moreDownloads Resources over HTTP in aerospike8.1 High
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- ibm sterling connectIBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote...7.3 High
- ibm mobile foundation, worklight +1 moreIBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0...5.3 Medium
- docker notaryDocker Notary Signature Algorithm Not Matched to Key vulnerability7.5 High
- ibm rational clearcaseThe Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x...7.4 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate...7.5 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate...7.5 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname...7.5 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL...7.5 High
- hitrontech cve-30360 firmwareHitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers...7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a...5.3 Medium
- wolfsslCyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers...5.9 Medium
- zyxel c1000z firmware, fr1000z firmware, gs1900-24 firmware +22 more +24 moreZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P...5.9 Medium
- cisco ios, nx-os +1 moreThe encryption library in Cisco IOS Software 15.2(1)T, 15.2(1)T1, and 15.2(2)T, Cisco NX-OS in...5.9 Medium
- samba, debian linux, hp cifs server +5 more +7 moreA flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used...7.4 High
- codeigniterCodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging...9.8 Critical
- codeigniter, kohanaframework kohana +1 moreCodeIgniter and Kohana vulnerable to PHP Object Injection9.8 Critical
- apache wicketApache Wicket insecure defaults7.5 High
- cisco firesight system softwareA vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco...7.5 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the...9.8 Critical
- mufg mitsubishi ufj, the bank of tokyo-mitsubishi ufj, ltd. app for android +1 moreThe Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man...3.1 Low
- openpgpjsOpenPGP 1.2.0 and earlier decrypts arbitrary messages7.5 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +2 morelibgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a...6.1 Medium
- redhat cloudforms management engineCloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.7.5 High
- gajimGajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients"...4.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using...7.8 High
- go ssh library, golang crypto +1 moregolang.org/x/crypto/ssh Man-in-the-Middle attack8.1 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue...6.8 Medium
- openstack glanceOpenStack Glance Signature Verification Bypass5.5 Medium
- intel mcafee vulnerability manager (mvm), mcafee vulnerability manager +1 moreUnsalted password vulnerability in the Enterprise Manager (web portal) component in Intel...8.8 High
- dell vce vision intelligent operationsThe System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement...6.7 Medium
- moxa miineport e1 firmware, miineport e2 firmware, miineport e3 firmware +2 moreAn issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and...5.3 Medium
- samsung knoxSamsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local...4.7 Medium
- adups fotaAn issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names...7.8 High
- adups fotaAn issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software....7.8 High
- adups fotaAn issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider...7.8 High
- adups fotaAn issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider...7.8 High
- borg project borgBorg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate...5.3 Medium
- apache http serverIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 High
- microsoft .net frameworkThe Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer...7.5 High
- Show moreLoading…