Weak cryptography or TLS.

editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption

• editso fuso
• Weak cryptography or TLS
• CWE-310

FNKvision Y215 CCTV Camera passwd crypt weak hash

• FNKvision Y215 CCTV Camera
• Weak cryptography or TLS

Windows Certificate Spoofing Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• Weak cryptography or TLS

Bypass the client certificate trust check of an opc.https server while only secure communication is allowed

• Softing OPC UA C++ SDK
• Softing edgeConnector
• Weak cryptography or TLS

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email and also includes the same password as a query parameter in the account activat…

• Weak cryptography or TLS

elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption

• elunez eladmin
• Weak cryptography or TLS
• CWE-310

Authentication Hijack

• StrongDM sdm-cli
• Weak cryptography or TLS

Cleartext transmission of sensitive information in JetBrains IntelliJ IDEA

• JetBrains IntelliJ IDEA
• Weak cryptography or TLS

Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption

• Linksys E5600
• Weak cryptography or TLS
• CWE-310

Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information

• Santesoft Sante PACS Server
• Weak cryptography or TLS

Improper signature verification in Lenovo 510 FHD Webcam and others

• Lenovo 510 FHD Webcam
• Lenovo Performance FHD Webcam
• Weak cryptography or TLS

IBM WebSphere Application Server information disclosure

• IBM WebSphere Application Server
• Weak cryptography or TLS

Improper signature verification in Siemens Mendix SAML (Mendix 10.12 compatible) and others

• Siemens Mendix SAML (Mendix 10.12 compatible)
• Siemens Mendix SAML (Mendix 10.21 compatible)
• Weak cryptography or TLS

Missing encryption of sensitive data in Bosch Rexroth AG ctrlX OS - Setup

• Bosch Rexroth AG ctrlX OS - Setup
• Weak cryptography or TLS
• CWE-1104

Netskope Client Local Elevation of Privileges

• Netskope Client
• Weak cryptography or TLS

GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

• Palo Alto Networks GlobalProtect App
• Palo Alto Networks Global Protect UWP App
• Weak cryptography or TLS

F5 Access for Android vulnerability

• F5 Access
• Weak cryptography or TLS

Broken or risky cryptographic algorithm in Siemens SmartClient modules Opcenter QL Home (SC) and others

• Siemens SmartClient modules Opcenter QL Home (SC)
• Siemens SOA Audit
• Weak cryptography or TLS

Missing encryption of sensitive data in Siemens SmartClient modules Opcenter QL Home (SC) and others

• Siemens SmartClient modules Opcenter QL Home (SC)
• Siemens SOA Audit
• Weak cryptography or TLS

Missing encryption of sensitive data in Siemens SmartClient modules Opcenter QL Home (SC) and others

• Siemens SmartClient modules Opcenter QL Home (SC)
• Siemens SOA Audit
• Weak cryptography or TLS

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces

• ETHER Catalyst::Authentication::Credential::HTTP
• Weak cryptography or TLS
• CWE-340

Cleartext transmission of sensitive information in YugabyteDB

• YugabyteDB
• Weak cryptography or TLS

Ruijie EG306MG strongSwan strongswan.conf missing encryption

• Ruijie EG306MG
• Weak cryptography or TLS
• CWE-310

macrozheng mall login cleartext transmission

• macrozheng mall
• Weak cryptography or TLS
• CWE-310

Dreame Technology iOS and Android Mobile Applications Improper Certificate Validation

• Dreame Technology Dreamehome iOS app
• Dreame Technology Dreamehome Android app
• Weak cryptography or TLS

EG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information

• EG4 Electronics EG4 12kPV
• EG4 Electronics EG4 18kPV
• Weak cryptography or TLS

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption.

• Weak cryptography or TLS

github.com/go-acme/lego/v4/acme/api does not enforce HTTPS

• Weak cryptography or TLS

<=4.25.1 · no fixed version yet

Cisco Webex Meeting Client Join Certificate Validation Vulnerability

• Cisco Webex Meetings
• Weak cryptography or TLS

Improper certificate validation in Eaton G4 PDU

• Eaton G4 PDU
• Weak cryptography or TLS

Lack of TLS validation

• checkpoint Check Point Management Log Server
• Weak cryptography or TLS

IBM Guardium Data Protection information disclosure

• IBM Guardium Data Protection
• Weak cryptography or TLS

Duplicate Advisory: CIRCL-Fourq: Missing and wrong validation can lead to incorrect results

• Weak cryptography or TLS

<1.6.1 · fixed in 1.6.1

Improper certificate validation in Huawei HarmonyOS

• Huawei HarmonyOS
• Weak cryptography or TLS

poco v1.14.1-release was discovered to contain weak encryption.

• Weak cryptography or TLS

Weak encryption in jsrsasign

• jsrsasign
• Weak cryptography or TLS

Vision UI's security-kit Contains Cryptographic Weakness

• DavidOsipov Vision-ui
• Weak cryptography or TLS

SAML 2.0 Public Key Validation Issue

• Zscaler Authentication Server
• Weak cryptography or TLS

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information.

• Weak cryptography or TLS

CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks.

• Weak cryptography or TLS

Hashicorp Vault has Incorrect Validation for Non-CA Certificates

• Weak cryptography or TLS

<1.20.1 · fixed in 1.20.1

1Panel agent certificate verification bypass leading to arbitrary command execution

• Command injection
• Weak cryptography or TLS

<0.0.0-20250730021757-04b9cbd87a15 || >=1.0.0, <2.0.6 · fixed in 0.0.0-20250730021757-04b9cbd87a15, 2.0.6

Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability

• Alpine iLX-507
• Weak cryptography or TLS

Improper signature verification in Debian devscripts

• Debian devscripts
• Weak cryptography or TLS

jose v6.0.10 was discovered to contain weak encryption.

• Weak cryptography or TLS

php-jwt contains weak encryption

• Weak cryptography or TLS

<7.0.0 · fixed in 7.0.0

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users ...

• Weak cryptography or TLS

<=2.10.1 · no fixed version yet

jwt v5.4.3 was discovered to contain weak encryption.

• Weak cryptography or TLS

Improper signature verification in Apple macOS

• Apple macOS
• Weak cryptography or TLS

Missing encryption of sensitive data in Apple macOS

• Apple macOS
• Weak cryptography or TLS

Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

• Weak cryptography or TLS

<3.2.6 · fixed in 3.2.6

Node-SAML SAML Signature Verification Vulnerability

• Authentication bypass
• Weak cryptography or TLS

<5.1.0 · fixed in 5.1.0

Polkadot Frontier contains silent failure in Curve25519 arithmetic precompiles with malformed points

• polkadot-evm frontier
• Weak cryptography or TLS

HP Linux Imaging and Printing Software - Use of DSA Key

• HP, Inc. HP Linux Imaging and Printing Software
• Weak cryptography or TLS

Weak hash in JetBrains TeamCity

• JetBrains TeamCity
• Weak cryptography or TLS

Vaelsys VaelsysV4 Web interface vgrid_server.php weak hash

• VaelsysV4
• Weak cryptography or TLS

Comodo Dragon IP DNS Leakage Detector cleartext transmission

• Comodo Dragon
• Weak cryptography or TLS
• CWE-310

Node-SAML SAML Authentication Bypass

• Cross-site scripting (XSS)
• Authentication bypass

<=3.1.2 · no fixed version yet

HCL IEM is affected by a password in cleartext vulnerability

• HCL Software IEM
• Weak cryptography or TLS

HCL IEM is affected by an authorization token sent in cookie vulnerability

• HCL Software IEM
• Weak cryptography or TLS