CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreUsage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware...5.9 Medium
- ibm sterling file gatewayIBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses...5.1 Medium
- beckhoff twincat, ics-cert beckhoff twincat +1 moreBeckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation...5.9 Medium
- icehrmIceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.7.5 High
- bouncycastle bc-java, fips java api, debian linux +17 more +19 moreBouncy Castle has a flaw in the Low-level interface to RSA key pair generator7.5 High
- auth0 jsonwebtoken, hackerone jsonwebtoken node module +1 moreVerification Bypass in jsonwebtoken9.8 Critical
- zblogcn z-blogphp** DISPUTED ** An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on...7.2 High
- moxa, moxa edr-810 firmware +1 moreAn exploitable Weak Cryptography for Passwords vulnerability exists in the web server...3.5 Low
- ehcp easy hosting control panelEasy Hosting Control Panel (EHCP) v0.37.12.b makes it easier for attackers to crack database...7.8 High
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...6.5 Medium
- zclassic z-nompZ-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to...7.5 High
- legion of the bouncy castle bouncy castle, bouncycastle bc-java, redhat satellite +1 more +3 moreBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 Medium
- openssl, canonical ubuntu linux +1 moreCache timing vulnerability in RSA Key Generation5.9 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary...8.8 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL...7.5 High
- huawei technologies co., ltd. dbs3900 tdd lte, huawei dbs3900 tdd lte firmware +1 moreDBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability....4.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than...6.2 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses...5.1 Medium
- huawei dp300 firmware, tp3206 firmware, viewpoint 9030 firmware +1 more +3 moreHuawei DP300 V500R002C00; TP3206 V100R002C00; ViewPoint 9030 V100R011C02; V100R011C03 have a use...5.9 Medium
- cavium nitrox ssl sdk, nitrox v ssl sdk, octeon sdk +11 more +13 moreCavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote...5.9 Medium
- idashboardsAn issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak...8.1 High
- gnupg libgcryptcipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly...7.5 High
- valvesoftware steam link firmwareAn issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters...9.8 Critical
- ibm security guardiumIBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic...7.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded...9.8 Critical
- citrix application delivery controller firmware, netscaler gateway firmware +1 moreCitrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67...5.9 Medium
- cognitoys stemosaur firmwareElemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small...5.9 Medium
- huawei fusionsphere openstackFusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability....5.9 Medium
- huawei oceanstor 5800 v3 firmware, oceanstor 6900 v3 firmware, huawei technologies co., ltd. oceanstor 5800 v3, oceanstor 6900 v3 +2 moreOceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an...5.9 Medium
- apache hadoopUse of a Broken or Risky Cryptographic Algorithm in Apache Hadoop9.8 Critical
- apache wss4jUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4J7.5 High
- nq contacts backup \& restoreIn the "NQ Contacts Backup & Restore" application 1.1 for Android, DES encryption with a static...7.5 High
- nq contacts backup \& restoreIn the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to...7.8 High
- pcuThe airbag detonation algorithm allows injury to passenger-car occupants via predictable Security...4.7 Medium
- ibm spectrum protect, tivoli storage manager +1 moreIBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption...4.4 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client...9.8 Critical
- sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more** DISPUTED ** An issue was discovered in SMA Solar Technology products. The inverters make use...9.8 Critical
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for...7.5 High
- xoev osci transport libraryA Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and...5.9 Medium
- tp-link wr841n v8 firmwareThe executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a...9.8 Critical
- seagate business nas firmwareSeagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute...9.8 Critical
- vmware vsphere data protection (vdp), vsphere data protection +1 moreVMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server...9.8 Critical
- rapid7 nexpose, nexpose hardware appliance +1 moreThe default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does...8.5 High
- mimosa client radios, backhaul radios +1 moreAn issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface,...7.5 High
- netiq edirectory, imanager +1 moreNovell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8...7.5 High
- magento magento2Unauthenticated crypto and weak IV in Magento\Framework\Encryption7.5 High
- mitsubishielectric qj71e71-100 firmware, qj71e71-b2 firmware, qj71e71-b5 firmware +2 moreAn issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface...7.5 High
- zohocorp webnms frameworkZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which...9.8 Critical
- google chromeSHA-1 is not collision resistant, which makes it easier for context-dependent attackers to...5.9 Medium
- dell bsafeThe client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5...7.5 High
- Show moreLoading…