# Weak cryptography or TLS. Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled.](https://agentprime.io/advisories/CVE-2025-59408.md) `CVE-2025-59408` · CVE record · CVSS 7.3 High · Not analysed yet · Published 25 Sept 2025 · Tags: Weak cryptography or TLS - [DragonFly's tiny file download uses hard coded HTTP protocol in d7y.io/dragonfly](https://agentprime.io/advisories/GHSA-mcvp-rpgg-9273.md) `GHSA-mcvp-rpgg-9273`, `CVE-2025-59410`, `GO-2025-3974` · Go `d7y.io/dragonfly/v2` and 1 more: affected `<2.1.0`, fixed in `2.1.0` · CVSS 5.5 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Weak cryptography or TLS - [DragonFly has weak integrity checks for downloaded files in d7y.io/dragonfly](https://agentprime.io/advisories/GHSA-hx2h-vjw2-8r54.md) `GHSA-hx2h-vjw2-8r54`, `CVE-2025-59354`, `GO-2025-3973` · Go `d7y.io/dragonfly/v2` and 1 more: affected `<2.1.0`, fixed in `2.1.0` · CVSS 5.5 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Weak cryptography or TLS - [Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly](https://agentprime.io/advisories/GHSA-98x5-jw98-6c97.md) `GHSA-98x5-jw98-6c97`, `CVE-2025-59347`, `GO-2025-3966` · Go `d7y.io/dragonfly/v2` and 1 more: affected `<2.1.0`, fixed in `2.1.0` · CVSS 2.7 Low · Not analysed yet · Published 24 Sept 2025 · Tags: Weak cryptography or TLS - [DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly](https://agentprime.io/advisories/GHSA-255v-qv84-29p5.md) `GHSA-255v-qv84-29p5`, `CVE-2025-59353`, `GO-2025-3969` · Go `d7y.io/dragonfly/v2` and 1 more: affected `<2.1.0`, fixed in `2.1.0` · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2025 · Tags: Weak cryptography or TLS, Broken access control - [Bluetooth: l2cap: Check encryption key size on incoming connection](https://agentprime.io/advisories/CVE-2025-39889.md) `CVE-2025-39889` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2025 · Tags: Weak cryptography or TLS - [AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/CVE-2025-59484.md) `CVE-2025-59484` · CVE record: AutomationDirect CLICK PLUS C0-0x CPU firmware and 2 more · CVSS 8.7 High · Not analysed yet · Published 23 Sept 2025 · Tags: Weak cryptography or TLS - [Coinomi cleartext transmission](https://agentprime.io/advisories/CVE-2017-20200.md) `CVE-2017-20200` · CVE record: Coinomi · CVSS 6.3 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2025-10548.md) `CVE-2025-10548` · CVE record: CleverControl CleverControl employee monitoring software · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Weak cryptography or TLS - [LionCoders SalePro POS Login cleartext transmission](https://agentprime.io/advisories/CVE-2025-10776.md) `CVE-2025-10776` · CVE record: LionCoders SalePro POS · CVSS 6.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Starch versions 0.14 and earlier generate session ids insecurely](https://agentprime.io/advisories/CVE-2025-40925.md) `CVE-2025-40925` · CVE record: BLUEFEET Starch · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2025 · Tags: Weak cryptography or TLS, CWE-340 - [MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates](https://agentprime.io/advisories/CVE-2024-13990.md) `CVE-2024-13990` · CVE record: MicroWorld Technologies eScan AV · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2025 · Tags: Weak cryptography or TLS - [Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks](https://agentprime.io/advisories/CVE-2025-34199.md) `CVE-2025-34199` · CVE record: Vasion Print Virtual Appliance Host and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2025 · Tags: Weak cryptography or TLS - [Supermicro BMC firmware update validation bypass](https://agentprime.io/advisories/CVE-2025-7937.md) `CVE-2025-7937` · CVE record: SMCI MBD-X12STW · CVSS 7.2 High · Not analysed yet · Published 19 Sept 2025 · Tags: Weak cryptography or TLS - [Supermicro BMC firmware update validation bypass](https://agentprime.io/advisories/CVE-2025-6198.md) `CVE-2025-6198` · CVE record: SMCI X13SEM-F · CVSS 7.2 High · Not analysed yet · Published 19 Sept 2025 · Tags: Weak cryptography or TLS - [Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2025-54818.md) `CVE-2025-54818` · CVE record: Cognex In-Sight 2000 series and 4 more · CVSS 8.6 High · Not analysed yet · Published 18 Sept 2025 · Tags: Weak cryptography or TLS - [Cleartext transmission of sensitive information in Cognex In-Sight 2000 series and others](https://agentprime.io/advisories/CVE-2025-47698.md) `CVE-2025-47698` · CVE record: Cognex In-Sight 2000 series and 4 more · CVSS 8.6 High · Not analysed yet · Published 18 Sept 2025 · Tags: Weak cryptography or TLS - [youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values](https://agentprime.io/advisories/CVE-2025-10671.md) `CVE-2025-10671` · CVE record: youth-is-as-pale-as-poetry e-learning · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Mattermost makes Use of Weak Hash in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-9p92-x77w-9fw2.md) `GHSA-9p92-x77w-9fw2`, `CVE-2025-9078`, `GO-2025-3959` · Go `github.com/mattermost/mattermost-server` and 3 more: affected `>=9.11.0+incompatible, <9.11.18+incompatible || >=10.5.0+incompatible, <10.5.9+incompatible || >=10.8.0+incompatible, <10.8.4+incompatible || >=10.9.0+incompatible, <10.9.4+incompatible || >=10.10.0+incompatible, <10.10.2+incompatible`, fixed in `9.11.18+incompatible`, `10.5.9+incompatible`, `10.8.4+incompatible`, `10.9.4+incompatible`, `10.10.2+incompatible` · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Weak cryptography or TLS - [CISA Thorium does not validate TLS connections to Elasticsearch](https://agentprime.io/advisories/CVE-2025-35434.md) `CVE-2025-35434` · CVE record: CISA Thorium · CVSS 2.3 Low · Not analysed yet · Published 17 Sept 2025 · Tags: Weak cryptography or TLS - [Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely](https://agentprime.io/advisories/CVE-2025-40933.md) `CVE-2025-40933` · CVE record: KGOLDOV Apache::AuthAny · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2025 · Tags: Weak cryptography or TLS, CWE-340 - [Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain](https://agentprime.io/advisories/GHSA-w7r3-mgwf-4mqq.md) `GHSA-w7r3-mgwf-4mqq`, `CVE-2025-9708` · NuGet `KubernetesClient`: affected `<17.0.14`, fixed in `17.0.14` · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Weak cryptography or TLS - [Authenticated Replay Attack contains Cryptographic Vulnerability](https://agentprime.io/advisories/CVE-2025-37127.md) `CVE-2025-37127` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway · CVSS 7.2 High · Not analysed yet · Published 16 Sept 2025 · Tags: Weak cryptography or TLS - [Linkr allows manifest tampering leading to arbitrary file injection](https://agentprime.io/advisories/CVE-2025-59334.md) `CVE-2025-59334` · CVE record: mohammadzain2008 Linkr · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2025 · Tags: Weak cryptography or TLS - [BMC Control-M/Agent hardcoded Blowfish keys](https://agentprime.io/advisories/CVE-2025-55112.md) `CVE-2025-55112` · CVE record: BMC Control-M/Agent · CVSS 7.6 High · Not analysed yet · Published 16 Sept 2025 · Tags: Hard-coded credentials, Weak cryptography or TLS - [BMC Control-M/Agent default SSL/TLS configuration authenticated bypass](https://agentprime.io/advisories/CVE-2025-55109.md) `CVE-2025-55109` · CVE record: BMC Control-M/Agent · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2025 · Tags: Weak cryptography or TLS - [Sensitive Data Exposure in Dolusoft's Omaspot](https://agentprime.io/advisories/CVE-2025-7743.md) `CVE-2025-7743` · CVE record: Dolusoft Omaspot · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2025 · Tags: Weak cryptography or TLS - [An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0.](https://agentprime.io/advisories/CVE-2025-50944.md) `CVE-2025-50944` · CVE record · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: Weak cryptography or TLS - [An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal…](https://agentprime.io/advisories/CVE-2025-50110.md) `CVE-2025-50110` · CVE record · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2025 · Tags: Weak cryptography or TLS, CWE-598 - [An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0.](https://agentprime.io/advisories/CVE-2025-46408.md) `CVE-2025-46408` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2025 · Tags: Weak cryptography or TLS - [Improper certificate validation in Wireless Tsukamoto Co., Ltd. WTW-EAGLE App for iOS and others](https://agentprime.io/advisories/CVE-2025-58781.md) `CVE-2025-58781` · CVE record: Wireless Tsukamoto Co., Ltd. WTW-EAGLE App for iOS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 12 Sept 2025 · Tags: Weak cryptography or TLS - [IBM Security Verify Information Queue information disclosure](https://agentprime.io/advisories/CVE-2024-45671.md) `CVE-2024-45671` · CVE record: IBM Security Verify Information Queue · CVSS 5.9 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Weak cryptography or TLS - [Cisco IOS XR Software Image Verification Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20248.md) `CVE-2025-20248` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.0 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Weak cryptography or TLS - [Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8](https://agentprime.io/advisories/CVE-2025-10227.md) `CVE-2025-10227` · CVE record: AxxonSoft AxxonOne C-Werk · CVSS 5.1 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Weak cryptography or TLS - [Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint.](https://agentprime.io/advisories/CVE-2025-55976.md) `CVE-2025-55976` · CVE record · CVSS 8.4 High · Not analysed yet · Published 10 Sept 2025 · Tags: Information disclosure, Weak cryptography or TLS - [Weak hash in Baicells NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846](https://agentprime.io/advisories/CVE-2025-55053.md) `CVE-2025-55053` · CVE record: Baicells NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Weak cryptography or TLS - [Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface](https://agentprime.io/advisories/CVE-2025-41708.md) `CVE-2025-41708` · CVE record: Bender CC612 and 4 more · CVSS 7.4 High · Not analysed yet · Published 8 Sept 2025 · Tags: Weak cryptography or TLS - [Misconfigured certificate validation with self-signed certificates for Print Deploy](https://agentprime.io/advisories/CVE-2025-9785.md) `CVE-2025-9785` · CVE record: PaperCut Print Deploy · CVSS 7.7 High · Not analysed yet · Published 3 Sept 2025 · Tags: Weak cryptography or TLS - [Tenda CP6 uhttp sub_2B7D04 risky encryption](https://agentprime.io/advisories/CVE-2025-9828.md) `CVE-2025-9828` · CVE record: Tenda CP6 · CVSS 6.3 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: Weak cryptography or TLS, CWE-310 - [Firmware upgrade packages are unsigned](https://agentprime.io/advisories/CVE-2025-52550.md) `CVE-2025-52550` · CVE record: Copeland LP E3 Supervisory Control · CVSS 8.6 High · Not analysed yet · Published 2 Sept 2025 · Tags: Weak cryptography or TLS - [IBM Concert Software information disclosure](https://agentprime.io/advisories/CVE-2025-33084.md) `CVE-2025-33084` · CVE record: IBM Concert Software · CVSS 5.9 Medium · Not analysed yet · Published 1 Sept 2025 · Tags: Weak cryptography or TLS - [IBM Concert Software information disclosure](https://agentprime.io/advisories/CVE-2025-33099.md) `CVE-2025-33099` · CVE record: IBM Concert Software · CVSS 5.9 Medium · Not analysed yet · Published 1 Sept 2025 · Tags: Weak cryptography or TLS - [IBM Concert Software information disclosure](https://agentprime.io/advisories/CVE-2025-33102.md) `CVE-2025-33102` · CVE record: IBM Concert Software · CVSS 5.9 Medium · Not analysed yet · Published 1 Sept 2025 · Tags: Weak cryptography or TLS - [Host Header Injection in Akinsoft's QR Menu](https://agentprime.io/advisories/CVE-2024-12925.md) `CVE-2024-12925` · CVE record: Akınsoft QR Menü · CVSS 7.3 High · Not analysed yet · Published 1 Sept 2025 · Tags: Weak cryptography or TLS - [Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module](https://agentprime.io/advisories/CVE-2025-7731.md) `CVE-2025-7731` · CVE record: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2025 · Tags: Weak cryptography or TLS - [Qsync Central](https://agentprime.io/advisories/CVE-2025-30278.md) `CVE-2025-30278` · CVE record: QNAP Systems Inc. Qsync Central · CVSS 8.3 High · Not analysed yet · Published 29 Aug 2025 · Tags: Weak cryptography or TLS - [Qsync Central](https://agentprime.io/advisories/CVE-2025-30277.md) `CVE-2025-30277` · CVE record: QNAP Systems Inc. Qsync Central · CVSS 8.3 High · Not analysed yet · Published 29 Aug 2025 · Tags: Weak cryptography or TLS - [Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark](https://agentprime.io/advisories/GHSA-95v9-hv42-pwrj.md) `GHSA-95v9-hv42-pwrj`, `CVE-2025-57801`, `GO-2025-3912` · Go `github.com/consensys/gnark`: affected `<0.14.0`, fixed in `0.14.0` · CVSS 8.6 High · Not analysed yet · Published 29 Aug 2025 · Tags: Weak cryptography or TLS - [Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library](https://agentprime.io/advisories/CVE-2025-7383.md) `CVE-2025-7383` · CVE record: Oberon microsystems AG Oberon PSA Crypto · CVSS 5.9 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Weak cryptography or TLS, CWE-208 - [Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library](https://agentprime.io/advisories/CVE-2025-7071.md) `CVE-2025-7071` · CVE record: Oberon microsystems AG ocrypto · CVSS 5.9 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Weak cryptography or TLS, CWE-208 - [A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)](https://agentprime.io/advisories/CVE-2025-31977.md) `CVE-2025-31977` · CVE record: HCL Software BigFix Service Management (SM) · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability](https://agentprime.io/advisories/CVE-2025-31972.md) `CVE-2025-31972` · CVE record: HCL Software BigFix Service Management (SM) · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [NeuVector has an insecure password storage and is vulnerable to rainbow attack](https://agentprime.io/advisories/GHSA-8ff6-pc43-jwv3.md) `GHSA-8ff6-pc43-jwv3`, `CVE-2025-53884`, `GO-2025-3917` · Go `github.com/neuvector/neuvector`: affected `<0.0.0-20250825191744-da1a462074c3`, fixed in `0.0.0-20250825191744-da1a462074c3` · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS, CWE-759 - [Lack of TLS validation in plugin Dell Powerscale on Checkmk Exchange](https://agentprime.io/advisories/CVE-2025-58127.md) `CVE-2025-58127` · CVE record · CVSS 6.9 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [Lack of TLS validation in plugin VMware vSAN on Checkmk Exchange](https://agentprime.io/advisories/CVE-2025-58126.md) `CVE-2025-58126` · CVE record · CVSS 6.9 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [Lack of TLS validation in plugin Freebox v6 agent on Checkmk Exchange](https://agentprime.io/advisories/CVE-2025-58125.md) `CVE-2025-58125` · CVE record · CVSS 6.9 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [Lack of TLS validation in plugin check-mk-api on Checkmk Exchange](https://agentprime.io/advisories/CVE-2025-58124.md) `CVE-2025-58124` · CVE record · CVSS 6.9 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange](https://agentprime.io/advisories/CVE-2025-58123.md) `CVE-2025-58123` · CVE record · CVSS 6.9 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [Weak encryption in DOS Co., Ltd. SS1](https://agentprime.io/advisories/CVE-2025-46409.md) `CVE-2025-46409` · CVE record: DOS Co., Ltd. SS1 · CVSS 8.7 High · Not analysed yet · Published 28 Aug 2025 · Tags: Weak cryptography or TLS - [Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key](https://agentprime.io/advisories/CVE-2025-30064.md) `CVE-2025-30064` · CVE record: CGM CGM CLININET · CVSS 8.8 High · Not analysed yet · Published 27 Aug 2025 · Tags: Weak cryptography or TLS, CWE-912 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .