CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Authentication Elevation of Privilege Vulnerability4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.3 Medium
- jwtk jjwtWithdrawn: JJWT improperly generates signing keys6.8 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken cryptographic...5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreGnutls: vulnerable to minerva side-channel information leak5.3 Medium
- dell powerscale onefsDell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic...7.4 High
- ibm mq operatorIBM MQ Container information disclosure5.9 Medium
- dell secure connect gateway, secure connect gateway (scg) 5.0 appliance - srs +1 moreDell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. An...3.7 Low
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty information disclosure5.3 Medium
- silabs emberznet, silabs.com ember znet sdk +1 moreSilicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM6.2 Medium
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX information disclosure5.9 Medium
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX information disclosure5.9 Medium
- ibm semeru runtimeIBM Semeru Runtime information disclosure5.9 Medium
- ibm i access client solutionsIBM i Access Client Solutions information disclosure5.1 Medium
- vyperlang vyperVyper SHA3 code generation bug3.7 Low
- b&r industrial automation automation runtimeFTP uses unsecure encryption mechanisms9.8 Critical
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreKernel: marvin vulnerability side-channel leakage in the rsa decryption operation6.5 Medium
- ibm powerscIBM PowerSC information disclosure5.9 Medium
- meshcentralYlianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.7.5 High
- ibm powerscIBM PowerSC information Disclosure5.9 Medium
- gessler gmbh web-master, gesslergmbh web-master firmware +1 moreUse of a Broken or Risky Cryptographic Algorithm in Gessler GmbH WEB-MASTER4.4 Medium
- devicefarmer smartphone test farmDeviceFarmer stf uses DES-ECB9.1 Critical
- hyperledger ursaCL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential6.5 Medium
- hyperledger ursaUrsa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders6.5 Medium
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreBruteforcing authentication cookie for a given user7.5 High
- korenix jetnet series, jetnet 4508-w firmware, jetnet 4508 firmware +40 more +42 moreUnauthenticated Firmware Upgrade9.8 Critical
- hcl software dryice myxalyticsA broken cryptographic algorithm impacts MyXalytics8.2 High
- hcl software dryice myxalyticsInsecure key rotation affects MyXalytics8.2 High
- sympaSympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not...7.5 High
- moxa iologik e1200 series, iologik e1210 firmware, iologik e1211 firmware +8 more +10 moreioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability6.5 Medium
- silabs.com gsdk, silabs gecko software development kit +1 morePotential Timing vulnerability in CBC PKCS7 padding calculations4.6 Medium
- blinksocksblinksocks has weak encryption algorithms7.5 High
- bcoinbsock uses weak hashing algorithms9.1 Critical
- dell networker virtual edition, emc networker +1 moreDell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated...5.3 Medium
- ibm spectrum scaleIBM Spectrum Scale information disclosure5.9 Medium
- broadcom fabric operating system, brocade switches +1 moreLicense forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,6.4 Medium
- etsi tetra standard, midnightblue tetra\ +1 moreDe-anonymization attack in TETRA4.3 Medium
- ibm planning analytics on cloud pak for dataIBM Planning Analytics on Cloud Pak for Data information disclosure6.5 Medium
- ibm cics tx advanced, cics tx +1 moreIBM CICS TX Advanced information disclosure5.9 Medium
- datahub-project datahubInsecure Use of HMAC-SHA1 For Session Signing in datahub6.4 Medium
- moxa nport 6000 series, nport 6000, nport 6150-t firmware +26 more +28 moreIncorrect Implementation of Authentication Algorithm Vulnerability7.5 High
- brix crypto-jscrypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard9.1 Critical
- entronad crypto-es, cryptoes +1 morecrypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard9.1 Critical
- jose4j project jose4jjose4j uses weak cryptographic algorithm7.5 High
- free5gc udmfree5GC udm vulnerable to Invalid Curve Attack7.5 High
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: potential pin bypass when card tracks its own login state6.6 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure5.4 Medium
- ibm security directory suite, security directory suite va +1 moreIBM Security Directory Suite information disclosure3.7 Low
- ayesa ibermatica rps, ibermatica rps 2019 +1 moreCryptographic Issues on IBERMATICA RPS8.2 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A...5.9 Medium
- Show moreLoading…