CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- espressif esp-idf, esp8266 nonos sdk +1 moreThe EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0...8.1 High
- symantec corporation proxysg, broadcom advanced secure gateway, symantec proxysg +1 more +3 moreThe ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses...6.5 Medium
- blake2 blake2-rustAlgorithms compute incorrect results in blake29.8 Critical
- openpgpjsInvalid Curve Attack in openpgp5.9 Medium
- cisco hyperflex hx-series, hyperflex hx220c af m5 firmware, hyperflex hx220c edge m5 firmware +3 more +5 moreCisco HyperFlex Static SSL Key Vulnerability6.8 Medium
- google nest cam iq indoor firmwareAn exploitable information disclosure vulnerability exists in the Weave PASE pairing...9.0 Critical
- codesys development system, raspberry pi, control for beaglebone sl +9 more +11 moreAn issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS...8.8 High
- siemens simatic cp 1626, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +32 more +34 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (All...5.9 Medium
- bluetooth br/edr, apple iphone os, mac os x +145 more +147 moreBlutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation7.6 High
- php jose project josePHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm7.5 High
- netapp data ontap operating in 7-mode, data ontap +1 moreSMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when...9.1 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Cryptographic Flaw7.5 High
- assaabloy hid digitalpersona 4500 firmwareThere is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U...5.9 Medium
- dropboxDropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71...7.8 High
- logitech unifying receiver firmwareLogitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is...6.5 Medium
- amd secure encrypted virtualization firmware, opensuse leap +1 moreSecure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor...5.3 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic...5.9 Medium
- haproxyHAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized,...5.9 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software IPsec Denial of Service Vulnerability8.6 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker...5.9 Medium
- microsoft windows, windows server, windows 10 +5 more +7 moreAn information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles...7.5 High
- cisco small business rv series router firmware, rv320 firmware, rv325 firmware +2 moreCisco Small Business RV320 and RV325 Routers Weak Credential Encryption Vulnerability5.9 Medium
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain...7.5 High
- portierAn issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using...9.8 Critical
- nablarch project nablarch, tis inc. nablarch 5 +1 moreNablarch Incomplete Cryptography9.1 Critical
- opensslChaCha20-Poly1305 with long nonces7.4 High
- apache jmeterUnauthenticated Remote Code Execution in Apache JMeter9.8 Critical
- amazon ring video doorbell firmwareAmazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio...9.1 Critical
- avaya one-x communicatorAvaya one-X Communicator Weak Encryption6.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL...5.9 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreCitrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14...5.9 Medium
- isc bind, bind 9 +1 moreAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys4.9 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected...5.3 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreImplementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an...6.5 Medium
- mobotix s14 firmwareAn issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored...7.5 High
- [unknown] kube-rbac-proxy, redhat openshift container platform +1 moreThe kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container...3.7 Low
- juniper networks atp, juniper advanced threat prevention firmware +1 moreJuniper ATP: Password hashing uses DES and a hardcoded salt6.7 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was...5.5 Medium
- huawei espace 7950 firmware, huawei technologies co., ltd. espace 7950 +1 moreThere is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker...5.9 Medium
- openssl, canonical ubuntu linux, debian linux +16 more +18 moreTiming attack against DSA5.9 Medium
- openssl, canonical ubuntu linux, debian linux +19 more +21 moreTiming attack against ECDSA signature generation5.9 Medium
- bigprof appginiBigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.5.3 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, rsa bsafe ssl-j +2 moreRSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a...5.9 Medium
- dell bsafe ssl-j, dell emc rsa bsafe ssl-j +1 moreRSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA...5.9 Medium
- pektron passive keyless entry and start system firmwareA Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and...6.5 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x...5.9 Medium
- schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0, schneider-electric modicon m221 firmware +1 moreA Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's...7.5 High
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...5.9 Medium
- Show moreLoading…