CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- aws sdk for c++aws-sdk-cpp security update6.0 Medium
- aws s3 encryption client for .netAmazon S3 Encryption Client for .NET has a Key Commitment Issue6.0 Medium
- tenda ax9, ax9 firmware +1 moreTenda AX9 httpd image_check weak hash6.3 Medium
- apache streamparkApache StreamPark: Weak Encryption Algorithm in StreamPark7.5 High
- meatmeetThe application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker...7.5 High
altchanpmAltcha Proof-of-Work obfuscation mode cryptanalytic break9.1 Criticallibcrux-intrinsicscrates.io,libcrux-ml-dsacrates.io,libcrux-ml-kemcrates.io +2 morelibcrux incorrectly calculates on aarch648.8 High- mescuwa entropy-derbyInside Track / Entropy Derby Timelock Encryption Bypassed via Pre-Computed VDF Output Leakage8.7 High
- ibm concertIBM Concert Information Disclosure5.9 Medium
- lfdt-lockness cggmp21CGGMP21 presignatures can be used in the way that significantly reduces security8.2 High
- ibm concertIBM Concert Software Information Disclosure5.9 Medium
- aveva edgeAVEVA Edge Use of a Broken or Risky Cryptographic Algorithm8.3 High
- desktopalert pingalert application serverA vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11...4.1 Medium
- duckdbDuckDB Encryption Crypto implementation is vulnerable6.9 Medium
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0,...5.9 Medium
- light & wonder, inc. / shfl entertainment, inc. / shuffle master, inc. deck mate 2Shuffle Master Deck Mate 2 Insecure Update Chain7.0 High
- ilevia eve x1 server firmware, ilevia srl. eve x1 server +1 moreIlevia EVE X1 Server 4.7.18.0.eden Insecure Hashing Algorithm8.2 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Password shadow weak hash1.0 Low
- samsung smart switchUse of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows...7.8 High
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...3.7 Low
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...5.3 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...5.3 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Password Hashing8.2 High
- andsoft e-tmsMultiple vulnerabilities in AndSoft's e-TMS6.9 Medium
- flocksafety bravo compute box firmwareFlock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot...7.3 High
- automationdirect click plus c0-0x cpu firmware, click plus c0-1x cpu firmware, click plus c2-x cpu firmware +2 moreAutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm8.7 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Replay Attack contains Cryptographic Vulnerability7.2 High
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent hardcoded Blowfish keys7.6 High
- ibm security verify information queueIBM Security Verify Information Queue information disclosure5.9 Medium
- tenda cp6, cp6 firmware +1 moreTenda CP6 uhttp sub_2B7D04 risky encryption6.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- oberon microsystems ag psa cryptoTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library5.9 Medium
- oberon microsystems ag ocryptoTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library5.9 Medium
- fnkvision y215 cctv cameraFNKvision Y215 CCTV Camera passwd crypt weak hash2.0 Low
- linksys e5600, e5600 firmware +1 moreLinksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption7.5 High
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...6.1 Medium
- pocoproject pocopoco v1.14.1-release was discovered to contain weak encryption.7.0 High
- jsrsasign project jsrsasignjsrsasign v11.1.0 was discovered to contain weak encryption.3.2 Low
- No product listedCyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm...8.4 High
node-joseDebianjose v6.0.10 was discovered to contain weak encryption.7.0 High- polkadot-evm frontierPolkadot Frontier contains silent failure in Curve25519 arithmetic precompiles with malformed points9.9 Critical
- vaelsys, vaelsys vaelsysv4 +1 moreVaelsys VaelsysV4 Web interface vgrid_server.php weak hash2.3 Low
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.11.0.0, contains a use of a broken or risky...4.4 Medium
- fnkvision fnk-gu2FNKvision FNK-GU2 MD5 shadow risky encryption1.0 Low
- ibm openpages with watsonIBM OpenPages with Watson information disclosure5.3 Medium
- microsoft 365 apps, 365 apps for enterprise +1 moreOffice Developer Platform Security Feature Bypass Vulnerability3.3 Low
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +71 more +73 moreA vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All...6.3 Medium
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +71 more +73 moreA vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All...6.1 Medium
- endress meac300-fnade4 firmware, endress+hauser meac300-fnade4 +1 moreCVE-2025-274586.5 Medium
- Show moreLoading…