Advisories · Weakness

CWE-310.

Every Advisory and CVE whose sources give the weakness CWE-310, newest first.

CVE-2026-120223 CVE record

CVSS 2.3 Low

Oray Pugongying X5 Pro Session ID session.lua session_get random values
- Oray Pugongying X5 Pro
- Weak cryptography or TLS
- CWE-310
Not analysed yet 1 Nov 2026
CVE-2026-116114 CVE record

CVSS 6.3 Medium

Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission
- Yoosee GM8135S Camera
- Weak cryptography or TLS
- CWE-310
Not analysed yet 26 Oct 2026
CVE-2026-116105 CVE record

CVSS 6.3 Medium

HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission
- HeyCyan App
- Weak cryptography or TLS
- CWE-310
Not analysed yet 26 Oct 2026
CVE-2026-115797 CVE record

CVSS 6.3 Medium

Tenda F6 Web Management cleartext transmission
- Tenda F6
- Weak cryptography or TLS
- CWE-310
Not analysed yet 23 Oct 2026
CVE-2026-115247 CVE record

CVSS 5.3 Medium

subhajitkhan online-clinic-management-system patientregistration.php missing encryption
- subhajitkhan online-clinic-management-system
- Weak cryptography or TLS
- CWE-310
Not analysed yet 22 Oct 2026
CVE-2026-114576 CVE record

CVSS 6.3 Medium

Linksys RE6250 Web Management strcmp random values
- Linksys RE6250
- Weak cryptography or TLS
- CWE-310
Not analysed yet 22 Oct 2026
CVE-2026-111993 CVE record

CVSS 4.8 Medium

Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage
- Soarkey StudentManagement
- Information disclosure
- CWE-310
Not analysed yet 18 Oct 2026
CVE-2026-105245 CVE record

CVSS 6.3 Medium

sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission
- sgl-project sglang
- Weak cryptography or TLS
- CWE-310
Not analysed yet 5 Oct 2026
CVE-2026-105179 CVE record

CVSS 5.1 Medium

SourceCodester Drug Recommendation System Password add_user.php missing encryption
- SourceCodester Drug Recommendation System
- Weak cryptography or TLS
- CWE-310
Not analysed yet 5 Oct 2026
CVE-2026-96550 CVE record

CVSS 6.3 Medium

sfturing hosp_order MailUtil.java getProperties cleartext transmission
- sfturing hosp_order
- Weak cryptography or TLS
- CWE-310
Not analysed yet 23 Sept 2026
CVE-2026-96549 CVE record

CVSS 4.8 Medium

sfturing hosp_order CommonUserServiceImpl.java cleartext storage
- sfturing hosp_order
- Information disclosure
- CWE-310
Not analysed yet 23 Sept 2026
CVE-2026-86280 CVE record

CVSS 6.9 Medium

SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
- SourceCodester Syllabus-Aligned Learning Management & Examination System
- Information disclosure
- CWE-310
Not analysed yet 7 Sept 2026
CVE-2026-82699 CVE record

CVSS 5.1 Medium

sambitraj Student Management System Password aca.sql cleartext storage
- sambitraj Student Management System
- Information disclosure
- CWE-310
Not analysed yet 31 Aug 2026
CVE-2026-82555 CVE record

CVSS 6.3 Medium

TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values
- TOTOLINK N600R
- Weak cryptography or TLS
- CWE-310
Not analysed yet 30 Aug 2026
CVE-2026-81836 CVE record

CVSS 6.3 Medium

RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission
- RooCodeInc Roo-Code
- Weak cryptography or TLS
- CWE-310
Not analysed yet 27 Aug 2026
CVE-2026-77151 CVE record

CVSS 6.3 Medium

lin-snow Ech0 crypto.go MD5Encrypt risky encryption
- lin-snow Ech0
- Weak cryptography or TLS
- CWE-310
Not analysed yet 20 Aug 2026
CVE-2026-19896 CVE record

CVSS 6.3 Medium

mangroup dtale Flask Session Cookie app.py build_secret_key random values
- mangroup dtale
- Weak cryptography or TLS
- CWE-310
Not analysed yet 15 Aug 2026
CVE-2026-19891 CVE record

CVSS 6.3 Medium

TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption
- TRENDnet TEW-WLC100
- Weak cryptography or TLS
- CWE-310
Not analysed yet 15 Aug 2026
CVE-2026-17616 CVE record

CVSS 6.8 Medium

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- IBM Security Verify Access
- IBM Verify Identity Access
- CWE-310
Not analysed yet 12 Aug 2026
CVE-2026-18591 CVE record

CVSS 2.4 Low

Meesho Online Shopping App com.meesho.supply cleartext storage
- Meesho Online Shopping App
- Information disclosure
- CWE-310
Not analysed yet 3 Aug 2026
CVE-2026-16213 CVE record

CVSS 4.8 Medium

Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage
- Fantomas42 django-blog-zinnia
- Information disclosure
- CWE-310
Not analysed yet 19 Jul 2026
CVE-2026-14702 CVE record

CVSS 2.0 Low

zcaceres markdownify-mcp webpage-to-markdown Markdownify.ts saveToTempFile random values
- zcaceres markdownify-mcp
- Weak cryptography or TLS
- CWE-310
Not analysed yet 5 Jul 2026
CVE-2026-49000 CVE record

CVSS 7.0 High

Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product
- ZTE ZXUniPOS NDS-LTE
- CWE-310
Not analysed yet 27 May 2026
langchain-chatchat PyPI

CVSS 2.1 Low

Langchain-Chatchat Uses Insufficiently Random Values
- Weak cryptography or TLS
- CWE-310
<=0.3.1.3 · no fixed version yet

GHSA-jv4p-mhmp-69vw · CVE-2026-7847 Not analysed yet 5 May 2026
CVE-2026-7610 CVE record

CVSS 6.3 Medium

TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission
- TRENDnet TEW-821DAP
- Weak cryptography or TLS
- CWE-310
Not analysed yet 2 May 2026
CVE-2026-5682 CVE record

CVSS 6.3 Medium

Meesho Online Shopping App com.meesho.supply endpoint risky encryption
- Meesho Online Shopping App
- Weak cryptography or TLS
- CWE-310
Not analysed yet 6 Apr 2026
CVE-2026-4584 CVE record

CVSS 2.3 Low

Shenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmission
- Shenzhen HCC Technology MPOS M6 PLUS
- Weak cryptography or TLS
- CWE-310
Not analysed yet 23 Mar 2026
CVE-2026-2671 CVE record

CVSS 2.3 Low

Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission
- Mendi Neurofeedback Headset
- Weak cryptography or TLS
- CWE-310
Not analysed yet 7 Mar 2026
CVE-2026-2966 CVE record

CVSS 6.3 Medium

Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values
- Cesanta Mongoose
- Weak cryptography or TLS
- CWE-310
Not analysed yet 23 Feb 2026
CVE-2026-2618 CVE record

CVSS 6.3 Medium

Beetel 777VR1 SSH Service risky encryption
- Beetel 777VR1
- Weak cryptography or TLS
- CWE-310
Not analysed yet 17 Feb 2026
CVE-2025-11640 CVE record

CVSS 2.3 Low

Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Weak cryptography or TLS
- CWE-310
Not analysed yet 12 Oct 2025
CVE-2025-21482 CVE record

CVSS 7.1 High

Cryptographic Issues in Core
- Qualcomm, Inc. Snapdragon
- CWE-310
Not analysed yet 24 Sept 2025
CVE-2017-20200 CVE record

CVSS 6.3 Medium

Coinomi cleartext transmission
- Coinomi
- Weak cryptography or TLS
- CWE-310
Not analysed yet 23 Sept 2025
CVE-2025-10776 CVE record

CVSS 6.3 Medium

LionCoders SalePro POS Login cleartext transmission
- LionCoders SalePro POS
- Weak cryptography or TLS
- CWE-310
Not analysed yet 22 Sept 2025
CVE-2025-10671 CVE record

CVSS 6.3 Medium

youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values
- youth-is-as-pale-as-poetry e-learning
- Weak cryptography or TLS
- CWE-310
Not analysed yet 18 Sept 2025
CVE-2025-9828 CVE record

CVSS 6.3 Medium

Tenda CP6 uhttp sub_2B7D04 risky encryption
- Tenda CP6
- Weak cryptography or TLS
- CWE-310
Not analysed yet 2 Sept 2025
CVE-2025-9513 CVE record

CVSS 6.3 Medium

editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption
- editso fuso
- Weak cryptography or TLS
- CWE-310
Not analysed yet 27 Aug 2025
CVE-2025-9239 CVE record

CVSS 6.3 Medium

elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption
- elunez eladmin
- Weak cryptography or TLS
- CWE-310
Not analysed yet 20 Aug 2025
CVE-2025-9146 CVE record

CVSS 7.5 High

Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption
- Linksys E5600
- Weak cryptography or TLS
- CWE-310
Not analysed yet 19 Aug 2025
CVE-2025-8763 CVE record

CVSS 6.3 Medium

Ruijie EG306MG strongSwan strongswan.conf missing encryption
- Ruijie EG306MG
- Weak cryptography or TLS
- CWE-310
Not analysed yet 9 Aug 2025
CVE-2025-8741 CVE record

CVSS 6.3 Medium

macrozheng mall login cleartext transmission
- macrozheng mall
- Weak cryptography or TLS
- CWE-310
Not analysed yet 8 Aug 2025
CVE-2025-8205 CVE record

CVSS 6.3 Medium

Comodo Dragon IP DNS Leakage Detector cleartext transmission
- Comodo Dragon
- Weak cryptography or TLS
- CWE-310
Not analysed yet 26 Jul 2025
CVE-2025-7215 CVE record

CVSS 1.0 Low

FNKvision FNK-GU2 wpa_supplicant.conf cleartext storage
- FNKvision FNK-GU2
- Information disclosure
- CWE-310
Not analysed yet 9 Jul 2025
CVE-2025-7214 CVE record

CVSS 1.0 Low

FNKvision FNK-GU2 MD5 shadow risky encryption
- FNKvision FNK-GU2
- Weak cryptography or TLS
- CWE-310
Not analysed yet 9 Jul 2025
CVE-2025-48823 CVE record

CVSS 5.9 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
- CWE-310
Not analysed yet 8 Jul 2025
CVE-2025-21422 CVE record

CVSS 7.1 High

Cryptographic Issues in Automotive
- Qualcomm, Inc. Snapdragon
- CWE-310
Not analysed yet 8 Jul 2025
CVE-2025-5136 CVE record

CVSS 6.3 Medium

Tmall Demo Payment Identifier pay random values
- Tmall Demo
- Weak cryptography or TLS
- CWE-310
Not analysed yet 24 May 2025
CVE-2025-4894 CVE record

CVSS 6.3 Medium

calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption
- calmkart Django-sso-server
- Weak cryptography or TLS
- CWE-310
Not analysed yet 18 May 2025
CVE-2025-3329 CVE record

CVSS 2.3 Low

Consumer Comanda Mobile Restaurant Order cleartext transmission
- Consumer Comanda Mobile
- Weak cryptography or TLS
- CWE-310
Not analysed yet 7 Apr 2025
CVE-2025-2922 CVE record

CVSS 1.0 Low

Netis WF-2404 BusyBox Shell cleartext storage
- Netis WF-2404
- Information disclosure
- CWE-310
Not analysed yet 28 Mar 2025
CVE-2025-1953 CVE record

CVSS 2.1 Low

vLLM AIBrix Prefix Caching hash.go random values
- vLLM AIBrix
- Weak cryptography or TLS
- CWE-310
Not analysed yet 4 Mar 2025
CVE-2025-0784 CVE record

CVSS 6.3 Medium

Intelbras InControl Registered User usuario cleartext transmission
- Intelbras InControl
- Weak cryptography or TLS
- CWE-310
Not analysed yet 28 Jan 2025
CVE-2024-38408 CVE record

CVSS 8.2 High

Cryptographic Issues in BT Controller
- Qualcomm, Inc. Snapdragon
- CWE-310
Not analysed yet 4 Nov 2024
CVE-2024-26228 CVE record

CVSS 7.8 High

Windows Cryptographic Services Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-310
Not analysed yet 9 Apr 2024
CVE-2024-20690 CVE record

CVSS 6.5 Medium

Windows Nearby Sharing Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 11 version 21H2
- CWE-310
Not analysed yet 9 Jan 2024
CVE-2023-33037 CVE record

CVSS 7.1 High

Cryptographic Issues in Automotive
- Qualcomm, Inc. Snapdragon
- CWE-310
Not analysed yet 2 Jan 2024
CVE-2023-44303 CVE record

CVSS 7.5 High

Dell RVTools: RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the…
- Dell RVTools
- CWE-310
Not analysed yet 24 Nov 2023
CVE-2022-22076 CVE record

CVSS 7.1 High

Cryptographic issue in Core
- Qualcomm, Inc. Snapdragon
- CWE-310
Not analysed yet 6 Jun 2023
CVE-2022-45453 CVE record

CVSS 5.3 Medium

TLS/SSL weak cipher suites enabled.
- Acronis Cyber Protect 15
- CWE-310
Not analysed yet 18 May 2023
CVE-2023-23919 CVE record

CVSS 7.5 High

Node: A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1…
- Node
- CWE-310
Not analysed yet 23 Feb 2023