Advisories · Weakness
CWE-649.
Every Advisory and CVE whose sources give the weakness CWE-649, newest first.
- CVSS 8.2 High
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
- CWE-649
>=0.1.0-pre · no fixed version yet
EEF-CVE-2026-95105 · CVE-2026-95105 - CVSS 8.7 High
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
- zitadel
- CWE-649
- CVSS 6.0 Medium
Weak encryption on Funambol's cloud server
- Funambol Cloud Server
- CWE-649
- CVSS 6.3 Medium
fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking
- fossasia open-event-server
- CWE-325
- CWE-649
- CVSS 8.8 High
SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification
- SICK AG SICK InspectorP61x
- SICK AG SICK InspectorP62x
- CWE-649
- CVSS 5.3 Medium
Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS.
- FreeFrom K.K. "FreeFrom - the nostr client" App for Android
- FreeFrom K.K. "FreeFrom - the nostr client" App for iOS
- CWE-649
- CVSS 5.9 Medium
Padding oracle attacks
- CWE-649
<2.0GA · fixed in 2.0GA
GHSA-3gp6-hhfw-4gqx · CVE-2010-3300 - CVSS 5.9 Medium
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an Error Message vulnerability, also known…
- Dell RSA BSAFE MES
- CWE-649