Weak cryptography or TLS.

Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

• WatchGuard Fireware OS
• Code injection
• Weak cryptography or TLS

Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature

• Lantronix G520 Series
• Weak cryptography or TLS

Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5

• Anjvision YSSD-RTMP-H5
• Weak cryptography or TLS

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

• Weak cryptography or TLS

>=7.24.1, <7.29.1 || >=8.0.0, <8.10.2 · fixed in 7.29.1, 8.10.2

NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability check

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Weak cryptography or TLS

Cleartext transmission of sensitive information in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• Weak cryptography or TLS

Improper certificate validation in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• Weak cryptography or TLS

Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure

• Weak cryptography or TLS

>=5.0.0, <10.0.2 · fixed in 10.0.2

utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL

• universal-tool-calling-protocol python-utcp
• Weak cryptography or TLS

OCSP stapling v2 multi accepts non-CA chain certificates as issuers

• wolfSSL
• Weak cryptography or TLS

NameConstraints not enforced across unconstrained intermediate CA

• wolfSSL
• Weak cryptography or TLS

Subject CN name-constraint check bypassed when non-DNS SAN present

• wolfSSL
• Weak cryptography or TLS

Failed X509_verify_cert leaves unverified CA in shared CertManager

• wolfSSL
• Weak cryptography or TLS

Trusted peer certificate match ignores public key, allowing forged CA clones

• wolfSSL
• Weak cryptography or TLS

Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

• wolfSSL
• Weak cryptography or TLS

Contrast before 1.16.0 Remote Attestation Relay Attack

• edgelesssys contrast
• Weak cryptography or TLS

Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass

• netty
• Weak cryptography or TLS

SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie

• siyuan
• Weak cryptography or TLS

OpenClaw iOS Control UI TLS Pin Enforcement Bypass

• OpenClaw
• Weak cryptography or TLS

TLS Hostname Verification Falls Back to CN After SAN Mismatch

• PHP
• Weak cryptography or TLS

Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail

• zammad
• Weak cryptography or TLS

Zammad: S/MIME signature verification allows forged sender impersonation

• zammad
• Authentication bypass
• Weak cryptography or TLS

Zammad: PGP signature spoofing via unvalidated verification return

• zammad
• Authentication bypass
• Weak cryptography or TLS

PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink

• DALIBO PostgreSQL Anonymizer
• Weak cryptography or TLS

Improper signature verification in IRONMACE Ironshield

• IRONMACE Ironshield
• Weak cryptography or TLS

Improper signature verification in MinIO

• MinIO
• Weak cryptography or TLS

Botslab G980H Dashcams Cleartext Transmission of Sensitive Information

• Botslab G980H
• Weak cryptography or TLS

social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing

• Authentication bypass
• Weak cryptography or TLS

<5.0.0 · fixed in 5.0.0

Improper certificate validation in Eufy Omni C20

• Eufy Omni C20
• Weak cryptography or TLS

Improper certificate validation in Dell ThinOS 10

• Dell ThinOS 10
• Weak cryptography or TLS

TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine

• HAVELSAN Inc. Liman Render Engine
• Weak cryptography or TLS

IBM Db2 Mirror for i is vulnerable to obtain sensitive information []

• IBM Db2 Mirror for i
• Weak cryptography or TLS

Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy

• Weak cryptography or TLS

>=0.1.2, <0.1.3 · fixed in 0.1.3

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function

• Weak cryptography or TLS

RabbitMQ: Trust-store whitelist by Issuer+Serial only

• rabbitmq-server
• Weak cryptography or TLS

RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch

• rabbitmq-server
• Weak cryptography or TLS

sfturing hosp_order MailUtil.java getProperties cleartext transmission

• sfturing hosp_order
• Weak cryptography or TLS
• CWE-310

Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

• Imprivata Enterprise Access Management
• Weak cryptography or TLS

Isotope eCommerce through 2.9.10 Weak Order Identifier Generation

• isotope-core
• Weak cryptography or TLS

Improper certificate validation in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• Weak cryptography or TLS

Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability

• Foxit Software Inc. Foxit PDF Editor
• Foxit Software Inc. Foxit PDF Reader
• Weak cryptography or TLS

Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added Content

• Foxit Software Inc. Foxit PDF Editor
• Foxit Software Inc. Foxit PDF Reader
• Weak cryptography or TLS

Insufficiently random values in OpenEye Apex Network Video Recorder (NVR)

• OpenEye Apex Network Video Recorder (NVR)
• Weak cryptography or TLS

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Weak cryptography or TLS

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Weak cryptography or TLS

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Weak cryptography or TLS

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Weak cryptography or TLS

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Weak cryptography or TLS

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Weak cryptography or TLS

Adobe Connect | Improper Certificate Validation (CWE-295)

• Adobe Connect
• Adobe Connect Android Mobile App
• Weak cryptography or TLS

Notepad++: Authenticode verification bypass allows modified updater execution

• notepad-plus-plus
• Weak cryptography or TLS

Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

• GitroomHQ postiz-app
• Weak cryptography or TLS
• CWE-341

Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Weak cryptography or TLS

Improper certificate validation in NVIDIA Infrastructure Controller

• NVIDIA Infrastructure Controller
• Weak cryptography or TLS

Improper certificate validation in NVIDIA Infrastructure Controller

• NVIDIA Infrastructure Controller
• Weak cryptography or TLS

Keycloak-services: keycloak-services: potential kdc spoofing bypass when kerberos password authentication is enabled

• Red Hat build of Keycloak 26.6.8
• Red Hat Single Sign-On 7
• Weak cryptography or TLS

Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target

• warp-tech warpgate
• Weak cryptography or TLS
• CWE-923

Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed

• Red Hat OpenShift Container Platform 4.18
• Red Hat OpenShift Container Platform 4
• Weak cryptography or TLS

Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header

• Red Hat Openshift Data Foundation 4
• Weak cryptography or TLS

NivoCart through 2.4.0 Predictable Administrator Password Reset Token

• nivocart
• Weak cryptography or TLS