Weak cryptography or TLS.

foreman_kubevirt disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set

• Weak cryptography or TLS

<0.4.3 · fixed in 0.4.3

Rancher CLI skips TLS verification on Rancher CLI login command

• Weak cryptography or TLS

<0.0.0-20260129092249-bb0625fd1896 || >=2.10.0, <2.10.11 || >=2.11.0, <2.11.10 || >=2.12.0, <2.12.6 || >=2.13.0, <2.13.2 · fixed in 0.0.0-20260129092249-bb0625fd1896, 2.10.11, 2.11.10, 2.12.6, 2.13.2

Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v

• TP-Link Systems Inc. VX800v v1.0
• Weak cryptography or TLS

`libparsec_crypto` does not check for weak order point of curve 25519

• Scille parsec-cloud
• Weak cryptography or TLS
• CWE-1240

Transmission of Unencrypted Data in Content Distribution Service

• TeamViewer DEX
• Weak cryptography or TLS

Improper certificate validation in Brother Industries, Ltd. Multiple MFPs and others

• Brother Industries, Ltd. Multiple MFPs
• Konica Minolta, Inc. Multiple MFPs
• Weak cryptography or TLS

An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable strin…

• Weak cryptography or TLS

Payment bypass in Commerce Paybox

• Drupal Commerce Paybox
• Weak cryptography or TLS

ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices

• Weak cryptography or TLS

>=0.0.4, <0.1.0-rc.4 · fixed in 0.1.0-rc.4

Clatter has a PSK Validity Rule Violation issue

• Weak cryptography or TLS

<2.2.0 · fixed in 2.2.0

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism.

• Weak cryptography or TLS

'openssl dgst' one-shot codepath silently truncates inputs >16MB

• OpenSSL
• Weak cryptography or TLS

Quick-Media Batik Codec FIX Package has Vulnerability in PNG Codec

• Weak cryptography or TLS

<=3.0.0 · no fixed version yet

Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods

• Weak cryptography or TLS
• Authentication bypass

<=26.5.2 · no fixed version yet

dcap-qvl has Missing Verification for QE Identity

• Weak cryptography or TLS

<0.3.9 · fixed in 0.3.9

X25519 secret validation did not check buffer length or clamping

• Weak cryptography or TLS

>=0.0.0-0, <0.0.6 · fixed in 0.0.6

Broken or risky cryptographic algorithm in Salesforce Marketing Cloud Engagement

• Salesforce Marketing Cloud Engagement
• Weak cryptography or TLS

Cleartext transmission of sensitive information in Dell ObjectScale

• Dell ObjectScale
• Weak cryptography or TLS

Cleartext transmission of sensitive information in Dell ObjectScale

• Dell ObjectScale
• Weak cryptography or TLS

Withdrawn Advisory: Open WebUI/ZDI-CAN-28259

• Weak cryptography or TLS

<=0.6.33 · no fixed version yet

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficie…

• Weak cryptography or TLS

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28.

• Information disclosure
• Weak cryptography or TLS

Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass

• Cross-site scripting (XSS)
• Information disclosure

<0.9.15 · fixed in 0.9.15

Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU

• Bosch Infotainment system ECU
• Weak cryptography or TLS

NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force

• nerves-hub nerves_hub_web
• Weak cryptography or TLS

Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks

• Altium Designer
• Weak cryptography or TLS

Triton VM has a Soundness Vulnerability due to Improper Sampling of Randomness

• Weak cryptography or TLS

>=0.41.0, <2.0.0 · fixed in 2.0.0

go-tuf improperly validates the configured threshold for delegations

• Weak cryptography or TLS

<2.3.1 · fixed in 2.3.1

sm-crypto Affected by Signature Forgery in SM2-DSA

• Weak cryptography or TLS

<0.4.0 · fixed in 0.4.0

sm-crypto Affected by Signature Malleability in SM2-DSA

• Weak cryptography or TLS

<0.3.14 · fixed in 0.3.14

Uncontrolled resource consumption in Oracle Corporation Oracle Java SE and others

• Oracle Corporation Oracle Java SE
• Oracle Corporation Oracle GraalVM for JDK
• Weak cryptography or TLS
• Denial of service

Insecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector Capture

• Milner ImageDirector Capture
• Weak cryptography or TLS

Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment

• Weak cryptography or TLS

<4.43.5-0.20260112202845-e225ef57912c || >=4.75.0, <4.75.2 || >=4.76.0, <4.76.2 || >=4.77.0, <4.77.1 || >=4.78.0, <4.78.3 · fixed in 4.43.5-0.20260112202845-e225ef57912c, 4.75.2, 4.76.2, 4.77.1, 4.78.3

Multiple vulnerabilities found in IBM ApplinX.

• IBM ApplinX
• Weak cryptography or TLS

Improper Server Certificate Validation in Automation Studio

• B&R Industrial Automation GmbH B&R Automation Studio
• Weak cryptography or TLS

Supermicro BMC firmware update validation bypass

• SMCI X13SEM-F
• Weak cryptography or TLS

Supermicro BMC firmware update validation bypass

• SMCI X12STW-F
• Weak cryptography or TLS

AVEVA Process Optimization Cleartext Transmission of Sensitive Information

• AVEVA Process Optimization
• Weak cryptography or TLS

Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)

• Juniper Networks Junos Space
• Weak cryptography or TLS

Cleartext transmission of sensitive information in Lenovo ThinkPlus FU100 and others

• Lenovo ThinkPlus FU100
• Lenovo ThinkPlus FU200
• Weak cryptography or TLS

Missing encryption of sensitive data in Lenovo ThinkPlus FU100 and others

• Lenovo ThinkPlus FU100
• Lenovo ThinkPlus FU200
• Weak cryptography or TLS

Hono JWK Auth Middleware has JWT algorithm confusion when JWK lacks "alg" (untrusted header.alg fallback)

• Weak cryptography or TLS

<4.11.4 · fixed in 4.11.4

Hono JWT Middleware's JWT Algorithm Confusion via Unsafe Default (HS256) Allows Token Forgery and Auth Bypass

• Weak cryptography or TLS

<4.11.4 · fixed in 4.11.4

Windows Kerberos Information Disclosure Vulnerability

• Microsoft Windows Server 2008 R2 Service Pack 1
• Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
• Weak cryptography or TLS

Windows Admin Center Elevation of Privilege Vulnerability

• Microsoft Windows Admin Center in Azure Portal
• Weak cryptography or TLS

Jervis's AES CBC Mode is Without Authentication

• Authentication bypass
• Weak cryptography or TLS

<2.2 · fixed in 2.2

Jervis Has a JWT Algorithm Confusion Vulnerability

• Weak cryptography or TLS

<2.2 · fixed in 2.2

Jervis Has Weak Random for Timing Attack Mitigation

• Weak cryptography or TLS

<2.2 · fixed in 2.2

Jervis's Salt for PBKDF2 derived from password

• Weak cryptography or TLS

<2.2 · fixed in 2.2

Jervis Has a SHA-256 Hex String Padding Bug

• Weak cryptography or TLS

<2.2 · fixed in 2.2

Jervis has Deterministic AES IV Derivation from Passphrase

• Weak cryptography or TLS
• CWE-340

<2.2 · fixed in 2.2

Jervis Has a RSA PKCS#1 Padding Vulnerability

• Weak cryptography or TLS

<2.2 · fixed in 2.2

Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping

• SAP_SE NW AS Java UME User Mapping
• Weak cryptography or TLS

Weblate command-line client susceptible to SSL verification skip

• Weak cryptography or TLS

<1.17.0 · fixed in 1.17.0

Improper certificate validation in mrvladus Errands

• mrvladus Errands
• Weak cryptography or TLS

Spectrum password returned in clear

• Broadcom DX NetOps Spectrum
• Weak cryptography or TLS

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component

• Weak cryptography or TLS

Insecure Transmission Vulnerability in Tenda Wireless Routers

• Tenda 300Mbps Wireless Router F3 and N300 Easy Setup Router
• Weak cryptography or TLS

Cleartext Transmission Vulnerability in Tenda Wireless Routers

• Tenda 300Mbps Wireless Router F3 and N300 Easy Setup Router
• Weak cryptography or TLS

libssh global known_hosts override

• curl
• Weak cryptography or TLS