Advisories · Weakness

CWE-310.

Every Advisory and CVE whose sources give the weakness CWE-310, newest first.

CVE-2022-40675 CVE record

CVSS 6.0 Medium

Fortinet FortiNAC: Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1…
- Fortinet FortiNAC
- CWE-310
Not analysed yet 16 Feb 2023
CVE-2022-4610 CVE record

CVSS 1.9 Low

Click Studios Passwordstate risky encryption
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-310
Not analysed yet 19 Dec 2022
CVE-2021-4258 CVE record

CVSS 3.7 Low

whohas Package Information cleartext transmission
- whohas
- CWE-310
Not analysed yet 19 Dec 2022
CVE-2022-32222 CVE record

Node: A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to…
- Node
- CWE-310
Not analysed yet 14 Jul 2022
CVE-2022-23719 CVE record

CVSS 7.2 High

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests
- Ping Identity PingID Windows Login
- Authentication bypass
- CWE-310
Not analysed yet 30 Jun 2022
CVE-2021-41995 CVE record

CVSS 7.7 High

PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks
- Ping Identity PingID Mac Login
- Authentication bypass
- CWE-310
Not analysed yet 30 Jun 2022
CVE-2022-23724 CVE record

CVSS 6.4 Medium

PingID Integration for Windows Login MFA Bypass
- Ping Identity PingID Integration for Windows Login
- Authentication bypass
- CWE-310
Not analysed yet 4 May 2022
CVE-2021-42001 CVE record

CVSS 8.0 High

PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure
- Ping Identity PingID Desktop
- CWE-310
Not analysed yet 30 Apr 2022
CVE-2021-41994 CVE record

CVSS 6.6 Medium

PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks
- Ping Identity PingID Mobile Application
- CWE-310
Not analysed yet 30 Apr 2022
CVE-2021-41993 CVE record

CVSS 6.6 Medium

PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks
- Ping Identity PingID Mobile Application
- CWE-310
Not analysed yet 30 Apr 2022
CVE-2021-41992 CVE record

CVSS 7.7 High

PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass
- Ping Identity PingID Windows Login
- Authentication bypass
- CWE-310
Not analysed yet 30 Apr 2022
com.amazonaws:aws-encryption-sdk-java +1 Maven

CVSS 4.8 Medium

Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
- Weak cryptography or TLS
- CWE-310
<2.0.0 · fixed in 2.0.0

GHSA-wqgp-vphw-hphf · CVE-2020-8897 Not analysed yet 12 Oct 2021
CVE-2021-22947 CVE record

CVSS 5.9 Medium

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c…
- https://github.com/curl/curl
- CWE-310
Not analysed yet 29 Sept 2021
golang.org/x/crypto Go

Man-in-the-middle attack in golang.org/x/crypto/ssh
- CWE-310
<0.0.0-20170330155735-e4e2799dd7aa · fixed in 0.0.0-20170330155735-e4e2799dd7aa

GHSA-xhjq-w7xm-p8qj · CVE-2017-3204 Not analysed yet 14 Apr 2021
CVE-2020-8150 CVE record

Nextcloud Server: A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the…
- Nextcloud Server
- CWE-310
Not analysed yet 9 Nov 2020
CVE-2020-8173 CVE record

Nextcloud Server: A too small set of random characters being used for encryption in Nextcloud Server 18.0.4…
- Nextcloud Server
- CWE-310
Not analysed yet 30 Oct 2020
CVE-2020-3389 CVE record

CVSS 4.4 Medium

Cisco Hyperflex HX-Series Software Weak Storage Vulnerability
- Cisco HyperFlex HX Data Platform
- CWE-310
Not analysed yet 26 Aug 2020
CVE-2019-3731 CVE record

CVSS 5.9 Medium

Dell RSA BSAFE Crypto-C Micro Edition: RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite…
- Dell RSA BSAFE Crypto-C Micro Edition
- Dell RSA BSAFE MES
- CWE-310
Not analysed yet 30 Sept 2019
CVE-2019-3740 CVE record

CVSS 6.5 Medium

Dell RSA BSAFE Crypto-J: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure…
- Dell RSA BSAFE Crypto-J
- CWE-310
Not analysed yet 18 Sept 2019
CVE-2019-3739 CVE record

CVSS 6.5 Medium

Dell RSA BSAFE Crypto-J: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through…
- Dell RSA BSAFE Crypto-J
- CWE-310
Not analysed yet 18 Sept 2019
CVE-2019-9506 CVE record

CVSS 7.6 High

Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation
- Bluetooth BR/EDR
- CWE-310
Not analysed yet 14 Aug 2019
CVE-2019-1940 CVE record

CVSS 5.3 Medium

Cisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability
- Cisco Industrial Network Director
- CWE-310
Not analysed yet 17 Jul 2019
CVE-2019-6576 CVE record

CVSS 6.5 Medium

Siemens AG SIMATIC HMI Comfort Panels 4" - 22": A vulnerability has been identified in SIMATIC HMI Comfort Panels 4"…
- Siemens AG SIMATIC HMI Comfort Panels 4" - 22"
- Siemens AG SIMATIC HMI Comfort Outdoor Panels 7" & 15"
- CWE-310
Not analysed yet 14 May 2019
CVE-2019-1804 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability
- Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode 11.0.1b
- CWE-310
Not analysed yet 3 May 2019
CVE-2018-0412 CVE record

Cisco Systems, Inc. Small Business 100 Series Wireless…: A vulnerability in the implementation of Extensible Authentication Protocol over LAN…
- Cisco Systems, Inc. Small Business 100 Series Wireless Access Points
- Cisco Systems, Inc. Small Business 300 Series Wireless Access Points
- CWE-310
Not analysed yet 15 Aug 2018
CVE-2017-13097 CVE record

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax license requirement
- IEEE Standard
- CWE-310
Not analysed yet 13 Jul 2018
CVE-2017-13096 CVE record

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax access control
- IEEE Standard
- CWE-310
Not analysed yet 13 Jul 2018
CVE-2017-13095 CVE record

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of a license-deny response to a license grant
- IEEE Standard
- CWE-310
Not analysed yet 13 Jul 2018
CVE-2017-13094 CVE record

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of the encryption key and insertion of hardware trojans in any IP
- IEEE Standard
- CWE-310
Not analysed yet 13 Jul 2018
CVE-2017-13093 CVE record

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans
- IEEE Standard
- CWE-310
Not analysed yet 13 Jul 2018
CVE-2017-13092 CVE record

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified HDL syntax allows use of an EDA tool as a decryption oracle
- IEEE Standard
- CWE-310
Not analysed yet 13 Jul 2018
CVE-2017-13091 CVE record

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified padding in CBC mode allows use of an EDA tool as a decrypt…
- IEEE Standard
- CWE-310
Not analysed yet 13 Jul 2018
CVE-2018-0283 CVE record

Cisco Firepower System Software: A vulnerability in the detection engine of Cisco Firepower System Software could allow an…
- Cisco Firepower System Software
- CWE-310
Not analysed yet 2 May 2018
CVE-2018-0281 CVE record

Cisco Firepower System Software: A vulnerability in the detection engine of Cisco Firepower System Software could allow an…
- Cisco Firepower System Software
- CWE-310
Not analysed yet 2 May 2018
CVE-2018-5466 CVE record

Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…
- Philips IntelliSpace Portal
- CWE-310
Not analysed yet 26 Mar 2018
CVE-2018-5464 CVE record

Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…
- Philips IntelliSpace Portal
- CWE-310
Not analysed yet 26 Mar 2018
CVE-2018-5462 CVE record

Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…
- Philips IntelliSpace Portal
- CWE-310
Not analysed yet 26 Mar 2018
CVE-2018-5458 CVE record

Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…
- Philips IntelliSpace Portal
- CWE-310
Not analysed yet 26 Mar 2018
CVE-2017-6766 CVE record

Cisco Firepower System Software: A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of…
- Cisco Firepower System Software
- CWE-310
Not analysed yet 7 Aug 2017
CVE-2014-5413 CVE record

CVSS 6.4 Medium

Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues
- Schneider Electric ClearSCADA
- Schneider Electric SCADA Expert ClearSCADA
- CWE-310
Not analysed yet 18 Sept 2014