# CWE-310. Every Advisory and CVE whose sources give the weakness CWE-310, newest first. ## Records, newest first - [Oray Pugongying X5 Pro Session ID session.lua session_get random values](https://agentprime.io/advisories/CVE-2026-120223.md) `CVE-2026-120223` · CVE record: Oray Pugongying X5 Pro · CVSS 2.3 Low · Not analysed yet · Published 1 Nov 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission](https://agentprime.io/advisories/CVE-2026-116114.md) `CVE-2026-116114` · CVE record: Yoosee GM8135S Camera · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310 - [HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission](https://agentprime.io/advisories/CVE-2026-116105.md) `CVE-2026-116105` · CVE record: HeyCyan App · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Tenda F6 Web Management cleartext transmission](https://agentprime.io/advisories/CVE-2026-115797.md) `CVE-2026-115797` · CVE record: Tenda F6 · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310 - [subhajitkhan online-clinic-management-system patientregistration.php missing encryption](https://agentprime.io/advisories/CVE-2026-115247.md) `CVE-2026-115247` · CVE record: subhajitkhan online-clinic-management-system · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Linksys RE6250 Web Management strcmp random values](https://agentprime.io/advisories/CVE-2026-114576.md) `CVE-2026-114576` · CVE record: Linksys RE6250 · CVSS 6.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage](https://agentprime.io/advisories/CVE-2026-111993.md) `CVE-2026-111993` · CVE record: Soarkey StudentManagement · CVSS 4.8 Medium · Not analysed yet · Published 18 Oct 2026 · Tags: Information disclosure, CWE-310 - [sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission](https://agentprime.io/advisories/CVE-2026-105245.md) `CVE-2026-105245` · CVE record: sgl-project sglang · CVSS 6.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310 - [SourceCodester Drug Recommendation System Password add_user.php missing encryption](https://agentprime.io/advisories/CVE-2026-105179.md) `CVE-2026-105179` · CVE record: SourceCodester Drug Recommendation System · CVSS 5.1 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310 - [sfturing hosp_order MailUtil.java getProperties cleartext transmission](https://agentprime.io/advisories/CVE-2026-96550.md) `CVE-2026-96550` · CVE record: sfturing hosp_order · CVSS 6.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS, CWE-310 - [sfturing hosp_order CommonUserServiceImpl.java cleartext storage](https://agentprime.io/advisories/CVE-2026-96549.md) `CVE-2026-96549` · CVE record: sfturing hosp_order · CVSS 4.8 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Information disclosure, CWE-310 - [SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage](https://agentprime.io/advisories/CVE-2026-86280.md) `CVE-2026-86280` · CVE record: SourceCodester Syllabus-Aligned Learning Management & Examination System · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Information disclosure, CWE-310 - [sambitraj Student Management System Password aca.sql cleartext storage](https://agentprime.io/advisories/CVE-2026-82699.md) `CVE-2026-82699` · CVE record: sambitraj Student Management System · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Information disclosure, CWE-310 - [TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values](https://agentprime.io/advisories/CVE-2026-82555.md) `CVE-2026-82555` · CVE record: TOTOLINK N600R · CVSS 6.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310 - [RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission](https://agentprime.io/advisories/CVE-2026-81836.md) `CVE-2026-81836` · CVE record: RooCodeInc Roo-Code · CVSS 6.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310 - [lin-snow Ech0 crypto.go MD5Encrypt risky encryption](https://agentprime.io/advisories/CVE-2026-77151.md) `CVE-2026-77151` · CVE record: lin-snow Ech0 · CVSS 6.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310 - [mangroup dtale Flask Session Cookie app.py build_secret_key random values](https://agentprime.io/advisories/CVE-2026-19896.md) `CVE-2026-19896` · CVE record: mangroup dtale · CVSS 6.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310 - [TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption](https://agentprime.io/advisories/CVE-2026-19891.md) `CVE-2026-19891` · CVE record: TRENDnet TEW-WLC100 · CVSS 6.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-17616.md) `CVE-2026-17616` · CVE record: IBM Security Verify Access and 3 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-310 - [Meesho Online Shopping App com.meesho.supply cleartext storage](https://agentprime.io/advisories/CVE-2026-18591.md) `CVE-2026-18591` · CVE record: Meesho Online Shopping App · CVSS 2.4 Low · Not analysed yet · Published 3 Aug 2026 · Tags: Information disclosure, CWE-310 - [Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage](https://agentprime.io/advisories/CVE-2026-16213.md) `CVE-2026-16213` · CVE record: Fantomas42 django-blog-zinnia · CVSS 4.8 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Information disclosure, CWE-310 - [zcaceres markdownify-mcp webpage-to-markdown Markdownify.ts saveToTempFile random values](https://agentprime.io/advisories/CVE-2026-14702.md) `CVE-2026-14702` · CVE record: zcaceres markdownify-mcp · CVSS 2.0 Low · Not analysed yet · Published 5 Jul 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product](https://agentprime.io/advisories/CVE-2026-49000.md) `CVE-2026-49000` · CVE record: ZTE ZXUniPOS NDS-LTE · CVSS 7.0 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-310 - [Langchain-Chatchat Uses Insufficiently Random Values](https://agentprime.io/advisories/GHSA-jv4p-mhmp-69vw.md) `GHSA-jv4p-mhmp-69vw`, `CVE-2026-7847`, `PYSEC-2026-2557` · PyPI `langchain-chatchat`: affected `<=0.3.1.3`, no fixed version yet · CVSS 2.1 Low · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS, CWE-310 - [TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission](https://agentprime.io/advisories/CVE-2026-7610.md) `CVE-2026-7610` · CVE record: TRENDnet TEW-821DAP · CVSS 6.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Meesho Online Shopping App com.meesho.supply endpoint risky encryption](https://agentprime.io/advisories/CVE-2026-5682.md) `CVE-2026-5682` · CVE record: Meesho Online Shopping App · CVSS 6.3 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Shenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmission](https://agentprime.io/advisories/CVE-2026-4584.md) `CVE-2026-4584` · CVE record: Shenzhen HCC Technology MPOS M6 PLUS · CVSS 2.3 Low · Not analysed yet · Published 23 Mar 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission](https://agentprime.io/advisories/CVE-2026-2671.md) `CVE-2026-2671` · CVE record: Mendi Neurofeedback Headset · CVSS 2.3 Low · Not analysed yet · Published 7 Mar 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values](https://agentprime.io/advisories/CVE-2026-2966.md) `CVE-2026-2966` · CVE record: Cesanta Mongoose · CVSS 6.3 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Beetel 777VR1 SSH Service risky encryption](https://agentprime.io/advisories/CVE-2026-2618.md) `CVE-2026-2618` · CVE record: Beetel 777VR1 · CVSS 6.3 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission](https://agentprime.io/advisories/CVE-2025-11640.md) `CVE-2025-11640` · CVE record: Tomofun Furbo 360 and 1 more · CVSS 2.3 Low · Not analysed yet · Published 12 Oct 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Cryptographic Issues in Core](https://agentprime.io/advisories/CVE-2025-21482.md) `CVE-2025-21482` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-310 - [Coinomi cleartext transmission](https://agentprime.io/advisories/CVE-2017-20200.md) `CVE-2017-20200` · CVE record: Coinomi · CVSS 6.3 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [LionCoders SalePro POS Login cleartext transmission](https://agentprime.io/advisories/CVE-2025-10776.md) `CVE-2025-10776` · CVE record: LionCoders SalePro POS · CVSS 6.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values](https://agentprime.io/advisories/CVE-2025-10671.md) `CVE-2025-10671` · CVE record: youth-is-as-pale-as-poetry e-learning · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Tenda CP6 uhttp sub_2B7D04 risky encryption](https://agentprime.io/advisories/CVE-2025-9828.md) `CVE-2025-9828` · CVE record: Tenda CP6 · CVSS 6.3 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption](https://agentprime.io/advisories/CVE-2025-9513.md) `CVE-2025-9513` · CVE record: editso fuso · CVSS 6.3 Medium · Not analysed yet · Published 27 Aug 2025 · Tags: Weak cryptography or TLS, CWE-310 - [elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption](https://agentprime.io/advisories/CVE-2025-9239.md) `CVE-2025-9239` · CVE record: elunez eladmin · CVSS 6.3 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption](https://agentprime.io/advisories/CVE-2025-9146.md) `CVE-2025-9146` · CVE record: Linksys E5600 · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Ruijie EG306MG strongSwan strongswan.conf missing encryption](https://agentprime.io/advisories/CVE-2025-8763.md) `CVE-2025-8763` · CVE record: Ruijie EG306MG · CVSS 6.3 Medium · Not analysed yet · Published 9 Aug 2025 · Tags: Weak cryptography or TLS, CWE-310 - [macrozheng mall login cleartext transmission](https://agentprime.io/advisories/CVE-2025-8741.md) `CVE-2025-8741` · CVE record: macrozheng mall · CVSS 6.3 Medium · Not analysed yet · Published 8 Aug 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Comodo Dragon IP DNS Leakage Detector cleartext transmission](https://agentprime.io/advisories/CVE-2025-8205.md) `CVE-2025-8205` · CVE record: Comodo Dragon · CVSS 6.3 Medium · Not analysed yet · Published 26 Jul 2025 · Tags: Weak cryptography or TLS, CWE-310 - [FNKvision FNK-GU2 wpa_supplicant.conf cleartext storage](https://agentprime.io/advisories/CVE-2025-7215.md) `CVE-2025-7215` · CVE record: FNKvision FNK-GU2 · CVSS 1.0 Low · Not analysed yet · Published 9 Jul 2025 · Tags: Information disclosure, CWE-310 - [FNKvision FNK-GU2 MD5 shadow risky encryption](https://agentprime.io/advisories/CVE-2025-7214.md) `CVE-2025-7214` · CVE record: FNKvision FNK-GU2 · CVSS 1.0 Low · Not analysed yet · Published 9 Jul 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Windows Cryptographic Services Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-48823.md) `CVE-2025-48823` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Cryptographic Issues in Automotive](https://agentprime.io/advisories/CVE-2025-21422.md) `CVE-2025-21422` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-310 - [Tmall Demo Payment Identifier pay random values](https://agentprime.io/advisories/CVE-2025-5136.md) `CVE-2025-5136` · CVE record: Tmall Demo · CVSS 6.3 Medium · Not analysed yet · Published 24 May 2025 · Tags: Weak cryptography or TLS, CWE-310 - [calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption](https://agentprime.io/advisories/CVE-2025-4894.md) `CVE-2025-4894` · CVE record: calmkart Django-sso-server · CVSS 6.3 Medium · Not analysed yet · Published 18 May 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Consumer Comanda Mobile Restaurant Order cleartext transmission](https://agentprime.io/advisories/CVE-2025-3329.md) `CVE-2025-3329` · CVE record: Consumer Comanda Mobile · CVSS 2.3 Low · Not analysed yet · Published 7 Apr 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Netis WF-2404 BusyBox Shell cleartext storage](https://agentprime.io/advisories/CVE-2025-2922.md) `CVE-2025-2922` · CVE record: Netis WF-2404 · CVSS 1.0 Low · Not analysed yet · Published 28 Mar 2025 · Tags: Information disclosure, CWE-310 - [vLLM AIBrix Prefix Caching hash.go random values](https://agentprime.io/advisories/CVE-2025-1953.md) `CVE-2025-1953` · CVE record: vLLM AIBrix · CVSS 2.1 Low · Not analysed yet · Published 4 Mar 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Intelbras InControl Registered User usuario cleartext transmission](https://agentprime.io/advisories/CVE-2025-0784.md) `CVE-2025-0784` · CVE record: Intelbras InControl · CVSS 6.3 Medium · Not analysed yet · Published 28 Jan 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Cryptographic Issues in BT Controller](https://agentprime.io/advisories/CVE-2024-38408.md) `CVE-2024-38408` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 4 Nov 2024 · Tags: CWE-310 - [Windows Cryptographic Services Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-26228.md) `CVE-2024-26228` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-310 - [Windows Nearby Sharing Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-20690.md) `CVE-2024-20690` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-310 - [Cryptographic Issues in Automotive](https://agentprime.io/advisories/CVE-2023-33037.md) `CVE-2023-33037` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-310 - [Dell RVTools: RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the…](https://agentprime.io/advisories/CVE-2023-44303.md) `CVE-2023-44303` · CVE record: Dell RVTools · CVSS 7.5 High · Not analysed yet · Published 24 Nov 2023 · Tags: CWE-310 - [Cryptographic issue in Core](https://agentprime.io/advisories/CVE-2022-22076.md) `CVE-2022-22076` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-310 - [TLS/SSL weak cipher suites enabled.](https://agentprime.io/advisories/CVE-2022-45453.md) `CVE-2022-45453` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-310 - [Node: A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1…](https://agentprime.io/advisories/CVE-2023-23919.md) `CVE-2023-23919` · CVE record: NodeJS Node · CVSS 7.5 High · Not analysed yet · Published 23 Feb 2023 · Tags: CWE-310 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .