Weak cryptography or TLS.

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled.

• Weak cryptography or TLS

DragonFly's tiny file download uses hard coded HTTP protocol in d7y.io/dragonfly

• Weak cryptography or TLS

<2.1.0 · fixed in 2.1.0

DragonFly has weak integrity checks for downloaded files in d7y.io/dragonfly

• Weak cryptography or TLS

<2.1.0 · fixed in 2.1.0

Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly

• Weak cryptography or TLS

<2.1.0 · fixed in 2.1.0

DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly

• Weak cryptography or TLS
• Broken access control

<2.1.0 · fixed in 2.1.0

Bluetooth: l2cap: Check encryption key size on incoming connection

• Linux kernel
• Weak cryptography or TLS

AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm

• AutomationDirect CLICK PLUS C0-0x CPU firmware
• AutomationDirect CLICK PLUS C0-1x CPU firmware
• Weak cryptography or TLS

Coinomi cleartext transmission

• Coinomi
• Weak cryptography or TLS
• CWE-310

Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution

• CleverControl employee monitoring software
• Weak cryptography or TLS

LionCoders SalePro POS Login cleartext transmission

• LionCoders SalePro POS
• Weak cryptography or TLS
• CWE-310

Starch versions 0.14 and earlier generate session ids insecurely

• BLUEFEET Starch
• Weak cryptography or TLS
• CWE-340

MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates

• MicroWorld Technologies eScan AV
• Weak cryptography or TLS

Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Weak cryptography or TLS

Supermicro BMC firmware update validation bypass

• SMCI MBD-X12STW
• Weak cryptography or TLS

Supermicro BMC firmware update validation bypass

• SMCI X13SEM-F
• Weak cryptography or TLS

Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information

• Cognex In-Sight 2000 series
• Cognex In-Sight 7000 series
• Weak cryptography or TLS

Cleartext transmission of sensitive information in Cognex In-Sight 2000 series and others

• Cognex In-Sight 2000 series
• Cognex In-Sight 7000 series
• Weak cryptography or TLS

youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values

• youth-is-as-pale-as-poetry e-learning
• Weak cryptography or TLS
• CWE-310

Mattermost makes Use of Weak Hash in github.com/mattermost/mattermost-server

• Weak cryptography or TLS

>=9.11.0+incompatible, <9.11.18+incompatible || >=10.5.0+incompatible, <10.5.9+incompatible || >=10.8.0+incompatible, <10.8.4+incompatible || >=10.9.0+incompatible, <10.9.4+incompatible || >=10.10.0+incompatible, <10.10.2+incompatible · fixed in 9.11.18+incompatible, 10.5.9+incompatible, 10.8.4+incompatible, 10.9.4+incompatible, 10.10.2+incompatible

CISA Thorium does not validate TLS connections to Elasticsearch

• CISA Thorium
• Weak cryptography or TLS

Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely

• KGOLDOV Apache::AuthAny
• Weak cryptography or TLS
• CWE-340

Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain

• Weak cryptography or TLS

<17.0.14 · fixed in 17.0.14

Authenticated Replay Attack contains Cryptographic Vulnerability

• Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
• Weak cryptography or TLS

Linkr allows manifest tampering leading to arbitrary file injection

• mohammadzain2008 Linkr
• Weak cryptography or TLS

BMC Control-M/Agent hardcoded Blowfish keys

• BMC Control-M/Agent
• Hard-coded credentials
• Weak cryptography or TLS

BMC Control-M/Agent default SSL/TLS configuration authenticated bypass

• BMC Control-M/Agent
• Weak cryptography or TLS

Sensitive Data Exposure in Dolusoft's Omaspot

• Dolusoft Omaspot
• Weak cryptography or TLS

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0.

• Weak cryptography or TLS

An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal…

• Weak cryptography or TLS
• CWE-598

An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0.

• Weak cryptography or TLS

Improper certificate validation in Wireless Tsukamoto Co., Ltd. WTW-EAGLE App for iOS and others

• Wireless Tsukamoto Co., Ltd. WTW-EAGLE App for iOS
• Wireless Tsukamoto Co., Ltd. WTW-EAGLE App for Android
• Weak cryptography or TLS

IBM Security Verify Information Queue information disclosure

• IBM Security Verify Information Queue
• Weak cryptography or TLS

Cisco IOS XR Software Image Verification Bypass Vulnerability

• Cisco IOS XR Software
• Weak cryptography or TLS

Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8

• AxxonSoft AxxonOne C-Werk
• Weak cryptography or TLS

Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint.

• Information disclosure
• Weak cryptography or TLS

Weak hash in Baicells NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846

• Baicells NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846
• Weak cryptography or TLS

Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

• Bender CC612
• Bender CC613
• Weak cryptography or TLS

Misconfigured certificate validation with self-signed certificates for Print Deploy

• PaperCut Print Deploy
• Weak cryptography or TLS

Tenda CP6 uhttp sub_2B7D04 risky encryption

• Tenda CP6
• Weak cryptography or TLS
• CWE-310

Firmware upgrade packages are unsigned

• Copeland LP E3 Supervisory Control
• Weak cryptography or TLS

IBM Concert Software information disclosure

• IBM Concert Software
• Weak cryptography or TLS

IBM Concert Software information disclosure

• IBM Concert Software
• Weak cryptography or TLS

IBM Concert Software information disclosure

• IBM Concert Software
• Weak cryptography or TLS

Host Header Injection in Akinsoft's QR Menu

• Akınsoft QR Menü
• Weak cryptography or TLS

Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module

• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS
• Weak cryptography or TLS

Qsync Central

• QNAP Systems Inc. Qsync Central
• Weak cryptography or TLS

Qsync Central

• QNAP Systems Inc. Qsync Central
• Weak cryptography or TLS

Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

• Weak cryptography or TLS

<0.14.0 · fixed in 0.14.0

Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library

• Oberon microsystems AG Oberon PSA Crypto
• Weak cryptography or TLS
• CWE-208

Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library

• Oberon microsystems AG ocrypto
• Weak cryptography or TLS
• CWE-208

A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)

• HCL Software BigFix Service Management (SM)
• Weak cryptography or TLS

HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability

• HCL Software BigFix Service Management (SM)
• Weak cryptography or TLS

NeuVector has an insecure password storage and is vulnerable to rainbow attack

• Weak cryptography or TLS
• CWE-759

<0.0.0-20250825191744-da1a462074c3 · fixed in 0.0.0-20250825191744-da1a462074c3

Lack of TLS validation in plugin Dell Powerscale on Checkmk Exchange

• Weak cryptography or TLS

Lack of TLS validation in plugin VMware vSAN on Checkmk Exchange

• Weak cryptography or TLS

Lack of TLS validation in plugin Freebox v6 agent on Checkmk Exchange

• Weak cryptography or TLS

Lack of TLS validation in plugin check-mk-api on Checkmk Exchange

• Weak cryptography or TLS

Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange

• Weak cryptography or TLS

Weak encryption in DOS Co., Ltd. SS1

• DOS Co., Ltd. SS1
• Weak cryptography or TLS

Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

• CGM CLININET
• Weak cryptography or TLS
• CWE-912