CWE-325.

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability

• Cisco Adaptive Security Appliance (ASA) Software
• CWE-325

Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads

• ebics-java-client
• CWE-325

Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.

• Juniper Networks Junos OS
• Weak cryptography or TLS
• CWE-300

Cleartext transmission of sensitive information in https://github.com/curl/curl

• https://github.com/curl/curl
• Weak cryptography or TLS
• CWE-325

Inadequate Encryption Strength in showdoc

• Weak cryptography or TLS
• CWE-325

<=2.9.8 · no fixed version yet

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen app…

• CWE-325

Multiple cryptographic issues in Python oic

• Weak cryptography or TLS
• CWE-325

<1.2.1 · fixed in 1.2.1

Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS

• Information disclosure
• Weak cryptography or TLS

>=9.0.0, <9.5.20 || >=10.0.0, <10.4.6 · fixed in 9.5.20, 10.4.6

Potential Remote Code Execution in TYPO3 with mediace extension

• Information disclosure
• Insecure deserialization

>=7.6.2, <7.6.5 · fixed in 7.6.5

qemu: A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth)…

• qemu
• CWE-325

Dell RSA BSAFE Crypto-J: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required…

• Dell RSA BSAFE Crypto-J
• CWE-325

Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange

• Apple macOS
• Apple iOS
• CWE-325

[UNKNOWN] nss: nss before version 3.30 is vulnerable to a remote denial of service during the session…

• [UNKNOWN] nss
• CWE-325