CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- huawei espace u1981 firmware, rse6500 firmware, softco firmware +2 more +4 moreSome Huawei products RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace...5.9 Medium
- das u-bootDas U-Boot's AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data6.4 Medium
- das u-bootDas U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data4.6 Medium
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax license requirement7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax access control7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of a license-deny response to a license grant7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of the encryption key and insertion of hardware trojans in any IP7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified HDL syntax allows use of an EDA tool as a decryption oracle7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified padding in CBC mode allows use of an EDA tool as a decrypti…7.8 High
- ibm tivoli application dependency discovery managerIBM Tivoli Application Dependency Discovery Manager (TADDM) before 7.2.1.5 and 7.2.x before 7.2.2...7.5 High
- bitcoin core, bitcoin-qt, bitcoind +2 moreIn Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" ...7.5 High
- suse kdump, linux enterprise desktop, linux enterprise server +2 moreMissing verification of host key for kdump server5.9 Medium
- bouncycastle bc-javaIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 High
- bouncycastle bc-javaIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 High
- react-native-baidu-voice-synthesizer project react-native-baidu-voice-synthesizer, hackerone react-native-baidu-voice-synthesizer node module +1 moreDownloads Resources over HTTP in react-native-baidu-voice-synthesizer8.1 High
- windows-latestchromedriver project windows-latestchromedriver, hackerone windows-latestchromedriver node module +1 moreDownloads Resources over HTTP in windows-latestchromedriver8.1 High
- mapbox npm-test-sqlite3-trunk, hackerone npm-test-sqlite3-trunk node module +1 moreDownloads Resources over HTTP in npm-test-sqlite3-trunk8.1 High
- alto-saxophone project alto-saxophone, hackerone alto-saxophone node module +1 moreDownloads Resources over HTTP in alto-saxophone8.1 High
- pm2-kafka project pm2-kafka, hackerone pm2-kafka node module +1 moreDownloads Resources over HTTP in pm2-kafka8.1 High
- haxeshim project haxeshimDownloads Resources over HTTP in haxeshim8.1 High
- windows-seleniumjar project windows-seleniumjar, hackerone windows-seleniumjar node module +1 morewindows-seleniumjar downloads Resources over HTTP8.1 High
- openframe-ascii-image project openframe-ascii-image, hackerone openframe-ascii-image node module +1 moreopenframe-ascii-image downloads Resources over HTTP8.1 High
- windows-iedriver project windows-iedriver, hackerone windows-iedriver node module +1 moreDownloads Resources over HTTP in windows-iedriver8.1 High
- haxe, hackerone haxe3 node module +1 moreDownloads Resources over HTTP in haxe38.1 High
- windows-selenium-chromedriver project windows-selenium-chromedriver, hackerone windows-selenium-chromedriver node module +1 morewindows-selenium-chromedriver downloads Resources over HTTP8.1 High
- fis-sass-all project fis-sass-all, hackerone fis-sass-all node module +1 morefis-sass-all downloads Resources over HTTP8.1 High
- pk-app-wonderbox project pk-app-wonderbox, hackerone pk-app-wonderbox node module +1 moreDownloads Resources over HTTP in pk-app-wonderbox8.1 High
- healthcenter project healthcenter, hackerone healthcenter node module +1 moreDownloads Resources over HTTP in healthcenter8.1 High
- hujiang arcanist, hackerone arcanist node module +1 moreDownloads Resources over HTTP in arcanist8.1 High
- serc.js project serc.js, hackerone serc.js node module +1 moreDownloads Resources over HTTP in serc.js8.1 High
- google-closure-tools-latest project google-closure-tools-latest, hackerone google-closure-tools-latest node module +1 moreDownloads Resources over HTTP in google-closure-tools-latest8.1 High
- rs-brightcove project rs-brightcove, hackerone rs-brightcove node module +1 moreDownloads Resources over HTTP in rs-brightcove8.1 High
- libsbmlsim project libsbmlsim, hackerone libsbmlsim node module +1 morelibsbmlsim downloads Resources over HTTP8.1 High
- ipip ipip-coffee, hackerone ipip-coffee node module +1 moreipip-coffee downloads Resources over HTTP8.1 High
- cloudpub-redis project cloudpub-redis, hackerone cloudpub-redis node module +1 morecloudpub-redis downloads Resources over HTTP8.1 High
- mystem-wrapper project mystem-wrapper, hackerone mystem-wrapper node module +1 moreDownloads Resources over HTTP in mystem-wrapper8.1 High
- windows-seleniumjar-mirror project windows-seleniumjar-mirror, hackerone windows-seleniumjar-mirror node module +1 moreDownloads Resources over HTTP in windows-seleniumjar-mirror8.1 High
- soci project soci, hackerone soci node module +1 moreDownloads Resources over HTTP in soci8.1 High
- libsbml project libsbml, hackerone libsbml node module +1 morelibsbml downloads Resources over HTTP8.1 High
- selenium-portal project selenium-portal, hackerone selenium-portal node module +1 moreDownloads Resources over HTTP in selenium-portal8.1 High
- herbivore project herbivore, hackerone herbivore node module +1 moreherbivore downloads Resources over HTTP8.1 High
- mystem project mystem, hackerone mystem node module +1 moremystem downloads Resources over HTTP8.1 High
- tomita project tomita, hackerone tomita node module +1 moreDownloads Resources over HTTP in tomita8.1 High
- phantomjs-cheniu project phantomjs-cheniu, hackerone phantomjs-cheniu node module +1 moreDownloads Resources over HTTP in phantomjs-cheniu8.1 High
- fis-parser-sass-bin project fis-parser-sass-bin, hackerone fis-parser-sass-bin node module +1 moreDownloads Resources over HTTP in fis-parser-sass-bin8.1 High
- co-cli-installer project co-cli-installer, hackerone co-cli-installer node module +1 moreDownloads Resources over HTTP in co-cli-installer8.1 High
- qbs project qbs, hackerone qbs node module +1 moreDownloads Resources over HTTP in qbs8.1 High
- clang-extra project clang-extra, hackerone clang-extra node module +1 moreclang-extra downloads Resources over HTTP8.1 High
- sfml project sfml, hackerone sfml node module +1 moreDownloads Resources over HTTP in sfml8.1 High
- Show moreLoading…