CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- yeswikiUse of a Broken or Risky Cryptographic Algorithm in YesWiki9.9 Critical
- topdata inner rep plus webserver, inner rep plus +1 moreTopdata Inner Rep Plus WebServer td.js.gz risky encryption5.1 Medium
- dell secure connect gateway (scg) 5.0 appliance - srs, secure connect gateway +1 moreDell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a...4.6 Medium
- oisf suricataSuricata http/byte-ranges: missing hashtable random seed leads to potential DoS7.5 High
- oisf suricataSuricata datasets: missing hashtable random seed leads to potential DoS7.5 High
- portainerPortainer improperly uses an encryption algorithm in the AesEncrypt function7.5 High
- planet gs-4210-24p2s firmware, gs-4210-24pl4c firmware, planet technology gs-4210-24p2s hardware 3.0 +1 more +3 morePLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentials7.5 High
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky...8.1 High
- ibm maximo application suiteIBM Maximo Application Suite information disclosure5.9 Medium
- authenticatorSecret encryption vulnerable to brute-force attacks8.8 High
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure5.9 Medium
- matrix olmAn issue was discovered in Matrix libolm (aka Olm) through 3.2.16. There is Ed25519 signature...4.3 Medium
- swissphone dical-redAn issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file...6.8 Medium
- appleboy gorushGorush uses deprecated TLS versions9.1 Critical
- dell insightiqDell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm...5.9 Medium
- beegoBeego privilege escalation vulnerability8.8 High
cggmp21crates.iocggmp21 vulnerable to ambiguous challenge derivation2.7 Lowpaillier-zkcrates.iopaillier-zk has ambiguous challenge derivation2.7 Lowcggmp21-keygencrates.iocggmp21-keygen has ambiguous challenge derivation2.7 Low- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Cryptographic Services Security Feature Bypass Vulnerability7.5 High
- kiloview p1/p2Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices5.3 Medium
- kiloview p1/p2Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices5.3 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky...5.9 Medium
- dell cloudlinkDell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky...3.8 Low
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker information disclosure5.9 Medium
- dell data domain operating system, powerprotect dd +1 moreDell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an...5.9 Medium
- mia technology inc. mia-med health aplication, miateknoloji mia-med +1 moreBroken or Risky Cryptographic Algorithm in Mia Technology's Mia-Med Health Aplication5.3 Medium
- tvsmotor tvs connectTVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely...7.5 High
- schneider electric powerlogic p5, schneider-electric powerlogic p5 firmware +1 moreCWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause...6.1 Medium
- authlibAuthlib has algorithm confusion with asymmetric public keys7.5 High
- ninjaframework ninjaWeak encryption in Ninja Core7.5 High
- mediatek nr15, nr16, nr17 +1 more +3 moreIn modem, there is a possible information disclosure due to using risky cryptographic algorithm...5.1 Medium
- google android, android kernel +1 moreThere is a possible escalation of privilege due to improperly used crypto. This could lead to...9.8 Critical
- ptrd kwikKwik does not discard unused encryption keys6.5 Medium
- open quantum safe liboqsAn issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in the /pqcrystals-dilithium-standard_ml-dsa-44-ipd_avx2/sign.c comp…9.8 Critical
- progress moveit automationThe Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length6.1 Medium
- argoproj argo cd, argo-cd +1 moreArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache9.1 Critical
github.com/bincyber/go-sqlcrypterGogithub.com/bincyber/go-sqlcrypter vulnerable to IV collision3.7 Lowgree/josePackagistgree/jose - "None" Algorithm treated as valid in tokensNo scorefuel/corePackagistfuel/core Crypt encryption compromised.No scoreasymmetricrypt/asymmetricryptPackagistasymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA EncryptionNo score- mozilla firefoxWeb application manifests were stored by using an insecure MD5 hash which allowed for a hash...8.1 High
- php-censorPHP Censor uses a weak hashing algorithm for the remember me key5.3 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains a use of a broken or risky...5.9 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.9 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.9 Medium
- mpdavis python-josepython-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret9.3 Critical
- python-jose project python-josepython-jose algorithm confusion with OpenSSH ECDSA keys6.5 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure2.5 Low
- Show moreLoading…