CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- envoyproxy envoyEnvoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption6.8 Medium
- shenzhen i365-tech co. ltd. setracker2 parental control app (android) package com.tgelec.setrackerSetracker2 Children's Smartwatch Ecosystem Use of a Broken or Risky Cryptographic Algorithm8.7 High
- wolfsslML-KEM ARM64 NEON ciphertext comparison only compares half of the input6.3 Medium
- wolfsslContinued acceptance of SHA-1/MD5 digests in certificate processing2.3 Low
- wolfsslML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery8.3 High
- corewcfCoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass3.7 Low
- steeltoeoss steeltoe.configuration.encryptionSteeltoe: OAEP setting silently selects PKCS#1 v1.5 padding1.9 Low
- dell powerflex, powerflex manager +1 moreDell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic...4.8 Medium
- canon eos network setting tool, canon inc. eos network setting tool for macos, eos network setting tool for windows +2 moreUse of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier7.6 High
- aqara iam/sso gateway, iam\/sso gateway +1 moreAqara unauthenticated AES oracle10.0 Critical
- broadcom spring web services, spring web services +1 moreInbound WS-Security allows RSA PKCS#1 v1.5 key transport by default4.8 Medium
- lenovo l13 (type 20r3, 20r4) laptops (thinkpad) bios, l13 2-in-1 gen 6 (type 21r7, 21r8) laptops (thinkpad) bios, l13 gen 4 (type 21fg, 21fh) laptop (thinkpad) bios +92 more +94 moreDuring an internal security assessment, a potential vulnerability was discovered in some ThinkPad...8.4 High
- yoanbernabeu grepaiyoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash2.0 Low
- yoanbernabeu grepaiyoanbernabeu grepai Qdrant Backend chunker.go weak hash2.3 Low
- thedotmack claude-memthedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash2.0 Low
- onnx onnx-mlironnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash2.0 Low
- milvusmilvus-io milvus Grantee ID Hash kv_catalog.go weak hash2.0 Low
lmcachePyPILMCache KV Cache utils.py hex_hash_to_int16 weak hash2.0 Low- zilliztech gptcachezilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash2.0 Low
- snowflake streamlitStreamlit Palette hashing.py weak hash2.0 Low
- lfprojects mlflowMLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash2.0 Low
- modelscope ms-swiftmodelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash2.0 Low
- paddlepaddle fastdeployPaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash2.0 Low
- gradio-app gradiogradio-app gradio Audio Cache Key save_audio_to_cache weak hash2.0 Low
mlrunPyPImlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash2.0 Low- No product listedMercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication...7.3 High
- indian motorcycle scout bobber + techIndian Scout Bobber 2025 WCM-to-ECM weak authentication4.1 Medium
- indian motorcycle scout bobber + techIndian Scout Bobber 2025 Infotainment-to-WCM weak authentication allows recovery of user PIN from observed exchange4.1 Medium
- dell powerflex manager, powerflex manager (appliance), powerflex manager (rack) +2 more +4 moreDell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic...3.6 Low
- netatalkWeak cryptography in DHCAST128 UAM7.4 High
- haxtheweb haxcms-nodejsHAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation9.3 Critical
- cephCeph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery8.9 High
- suluSulu: Weak Cryptographical usage for API Key generation and Reset Tokens6.9 Medium
- opensourcepos open source point of saleopensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash6.3 Medium
- benmcollins libjwtLibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC9.1 Critical
- ingeteam ingecon sun ems boardInsecure generation of SAT access credentials in Ingecon EMS Board9.2 Critical
- maxhub pivot client applicationMAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic Algorithm7.3 High
- paramikoParamiko rsakey.py allows the SHA-1 algorithm3.4 Low
- chatchat-space langchain-chatchatchatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash2.1 Low
- code-projects chat systemcode-projects Chat System MD5 Hash update_user.php weak hash6.3 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access6.5 Medium
code.gitea.io/giteaGoGitea has insecure default SSH settings6.3 Medium- silex technology, inc. amc manager, sd-330ac, silextechnology sd-330ac firmware +2 moreSD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a...8.2 High
- flowiseFlowise - Weak Default JWT Secrets in Authentication Middleware9.3 Critical
- legion of the bouncy castle inc. bc-java, bcpix-lts, bcpkix-fips +43 more +45 morePKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +44 more +46 moreGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Critical
- apache tomcatApache Tomcat: TLS cipher order is not preserved7.5 High
litellmPyPILiteLLM: Password hash exposure and pass-the-hash authentication bypass8.6 High- semtech lr1110, lr1120, lr1121 +2 moreSemtech LR11xx Secure Boot Bypass7.0 High
- meesho online shopping appMeesho Online Shopping App com.meesho.supply endpoint risky encryption6.3 Medium
- Show moreLoading…