CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- meltytech shotcutIn mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of...5.9 Medium
- wibu codemeterProtocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected,...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreTLS Information Disclosure Vulnerability5.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, nicobar firmware +13 more +15 moreu'Keymaster attestation key and device IDs provisioning which is a one time process is...7.8 High
parselnpmInsecure Cryptography Algorithm in parselNo scoresimple-crypto-jsnpmInsecure Cryptography Algorithm in simple-crypto-js5.9 Medium- auth0 jsonwebtoken, node-jsonwebtoken +1 morejsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()6.4 Medium
- zte zxiptv firmwareA ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is...9.1 Critical
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that...5.9 Medium
- amazon aws s3 crypto sdk, google llc aws s3 crypto sdk for golang +1 moreIn-band key negotiation issue in AWS S3 Crypto SDK for GoLang2.5 Low
- amazon aws s3 crypto sdk, google llc aws s3 crypto sdk for golang +1 moreCBC padding oracle in AWS S3 Crypto SDK for GoLang5.6 Medium
- hichip shenzhen hichip vision technology firmwareFirmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many...7.5 High
- cs2-network p2pCS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an...5.9 Medium
- mozilla firefox, firefox for android, firefox mobile +2 moreDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 Medium
- octobercms octoberReliance on Cookies without validation in OctoberCMS6.1 Medium
- qualcomm -Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system...9.8 Critical
- ibm security guardiumIBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms...5.9 Medium
- typo3, typo3 cms +1 moreMissing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS8.8 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...7.5 High
- schneider-electric easergy builderA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy...7.8 High
- yubico libykpiv, piv tool manager, yubikey smart card minidriver +2 moreAn issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect...4.3 Medium
- node.bcrypt.js project node.bcrypt.jsInsecure Encryption5.9 Medium
- ibm api connectIBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic...5.9 Medium
- mozilla firefox, debian linux, fedoraproject fedora +1 more +3 moreDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 Medium
- schneider-electric easergy t300 firmwareA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 ...7.5 High
- ibm security guardiumIBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an...4.1 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...7.4 High
- ibm planning analytics localIBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- python-rsa project python-rsa, canonical ubuntu linux, fedoraproject fedora +2 morePython-RSA decryption of ciphertext leads to DoS7.5 High
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms...5.9 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms...5.9 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms...5.9 Medium
- dlink dsp-w215 firmwareD-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the...6.5 Medium
- jetstream jetselectBond JetSelect (all versions) has an issue in the Java class (ENCtool.jar) and corresponding...9.8 Critical
- ledger moneroA flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S...5.5 Medium
- glpi-project glpi, fedoraproject fedora +1 moreweak CSRF tokens in GLPI7.5 High
- zoom meetingsairhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242...7.5 High
- google androidAn issue was discovered on LG mobile devices with Android OS 9.0 (Qualcomm SDM450, SDM845, SM6150...5.5 Medium
- mitel mivoice connect clientA weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow...9.8 Critical
- bluetrace opentraceThe Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +21 more +23 moreWrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto,...7.8 High
- arm mbed tls, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that...4.7 Medium
- sepppenner windowshelloInternal NCryptDecrypt method could be used externally from WindowsHello library.5.1 Medium
- ecobee ecobee4 firmwareEcobee Ecobee4 4.2.0.171 devices can be forced to deauthenticate and connect to an unencrypted Wi...7.5 High
- wolfsslwolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890...9.8 Critical
- visam vbase editor, vbase web-remote module, vbase web-remote +2 moreVISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and...7.8 High
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...7.4 High
- zoom meetingsZoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption....7.5 High
- Show moreLoading…