Weak cryptography or TLS.

GlitterWare Passy TLS main.dart MyHttpOverrides certificate validation

• GlitterWare Passy
• Authentication bypass
• Weak cryptography or TLS

f3-factory fatfree-core HTTP Client web.php _curl certificate validation

• f3-factory fatfree-core
• Authentication bypass
• Weak cryptography or TLS

diem-project diem dmString.php random weak prng

• diem
• Weak cryptography or TLS
• CWE-331

diem-project diem Google Analytics Client gapi.class.php certificate validation

• diem
• Authentication bypass
• Weak cryptography or TLS

diem-project diem SHA1 PluginDmUser.class.php weak password hash

• diem
• Weak cryptography or TLS

light0011 cms UserModel.class.php sha1 weak password hash

• light0011 cms
• Weak cryptography or TLS

OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation

• opentelemetry-exporter-otlp-proto-http
• Weak cryptography or TLS

IBM Db2 Genius Hub Improper verification of cryptographic signature

• IBM Db2 Genius Hub
• Weak cryptography or TLS

Lightweight Cookie Notice <= 1.19 - Sensitive Information Exposure via W3TC_DYNAMIC_SECURITY Constant

• daext Lightweight Cookie Notice – Cookie Banner for Cookie Consent
• Weak cryptography or TLS

Improper certificate validation in Lenovo Smart Camera C33 and others

• Lenovo Smart Camera C33
• Lenovo Smart Camera C33 Pro
• Weak cryptography or TLS

JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1

• JuggleIM
• Weak cryptography or TLS

joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json

• authlib joserfc
• Authentication bypass
• Weak cryptography or TLS

Inadequate Encryption Strength in Slican telephone exchanges

• Slican IPx
• Slican CCT-1668
• Weak cryptography or TLS

Improper certificate validation in Cato Client tunnel handshake

• Cato Networks Cato Client for Windows
• Cato Networks Cato Client for macOS
• Weak cryptography or TLS

FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass

• flexprice
• Weak cryptography or TLS

Improper certificate validation in Eclipse Foundation Eclipse Vert.x

• Eclipse Foundation Eclipse Vert.x
• Weak cryptography or TLS

TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries

• Erlang OTP
• Weak cryptography or TLS

Cleartext Transmission of Sensitive Information in ADP Desktop SDK

• Autodesk ADP Desktop SDK
• Weak cryptography or TLS

Improper certificate validation in Dell Terraform Provider for Redfish

• Dell Terraform Provider for Redfish
• Weak cryptography or TLS

CAI Content Credentials | Improper Certificate Validation (CWE-295)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Certificate Validation (CWE-295)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Certificate Validation (CWE-295)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Certificate Validation (CWE-295)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Certificate Validation (CWE-295)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Certificate Validation (CWE-295)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

• Adobe Content Credentials Rust SDK
• Adobe C2PA Tool
• Weak cryptography or TLS

Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability

• Weak cryptography or TLS

>=8.0.0, <8.0.5 · fixed in 8.0.5

IBM WebSphere Application Server Liberty Improper Certificate Validation

• IBM WebSphere Application Server - Liberty
• Weak cryptography or TLS

Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability

• Weak cryptography or TLS

>=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 11.0.0-rc.2

Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()

• Omnispace Agora Project
• Weak cryptography or TLS

Active Directory Federation Services (AD FS) Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass
• Weak cryptography or TLS

Windows Audio Service Elevation of Privilege Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Weak cryptography or TLS

.NET Security Feature Bypass Vulnerability

• Microsoft .NET 10.0 runtime
• Microsoft .NET 11.0 runtime
• Weak cryptography or TLS

Active Directory Federation Services (AD FS) Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Weak cryptography or TLS

Microsoft Exchange Server Elevation of Privilege Vulnerability

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• Weak cryptography or TLS

Role: DNS Server Tampering Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Weak cryptography or TLS

Windows Remote Desktop Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Weak cryptography or TLS

Windows Schannel Spoofing Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Weak cryptography or TLS

Windows Hello Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Weak cryptography or TLS

Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Weak cryptography or TLS

Windows Update Stack Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Weak cryptography or TLS
• CWE-20

Windows Key Distribution Center Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Weak cryptography or TLS

Microsoft Office SharePoint Elevation of Privilege Vulnerability

• Microsoft SharePoint Server Subscription Edition
• Weak cryptography or TLS

novel through 3.5.0 Unsalted MD5 Password Storage

• xxyopen novel
• Weak cryptography or TLS

Improper certificate validation in Zoom Communications Zoom Clients

• Zoom Communications Zoom Clients
• Weak cryptography or TLS

Improper certificate validation in Zoom Communications Zoom Clients

• Zoom Communications Zoom Clients
• Weak cryptography or TLS

H3C G3/G5 HDM Firmware Verification Key Replacement

• H3C HDM Family-A G5
• Weak cryptography or TLS

Weak hash in NVIDIA Megatron-LM

• NVIDIA Megatron-LM
• Weak cryptography or TLS

Improper certificate validation in Siemens Industrial Edge App Publisher

• Siemens Industrial Edge App Publisher
• Weak cryptography or TLS

D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification

• D-Link DCS-930L
• Weak cryptography or TLS
• CWE-345

IBM Aspera Enterprise Webapps Information Disclosure

• IBM Aspera Enterprise WebApps
• Weak cryptography or TLS

DataStage on Cloud Pak for Data Improper Certificate Validation

• IBM DataStage on Cloud Pak for Data
• Weak cryptography or TLS

NetEase Cloud Music TLS Certificate Validation Bypass

• NetEase Cloud Music for Windows
• Weak cryptography or TLS

Cleartext transmission in Progress MarkLogic Server Amazon S3 connections

• Progress Software Corporation MarkLogic Server
• Weak cryptography or TLS

Improper TLS hostname verification in Progress MarkLogic Server

• Progress Software Corporation MarkLogic Server
• Weak cryptography or TLS

Cleartext transmission in Progress MarkLogic Server cluster join operations

• Progress Software Corporation MarkLogic Server
• Weak cryptography or TLS