Inadequate Encryption Strength

Every one of the 407 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Primetek Primefaces 5.x - Remote Code ExecutionCVE-2017-1000486Primetek · CVSS 9.8 · 94% likely

   PrimetekFIN13

2. Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbit…CVE-2017-11317Telerik · CVSS 9.8 · 84% likely

   Telerik

3. DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie DeserializationCVE-2018-15811DotNetNuke (DNN) · CVSS 7.5 · 76% likely

   DotNetNuke (DNN)

4. DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie DeserializationCVE-2018-18325DotNetNuke (DNN) · CVSS 7.5 · 74% likely

   DotNetNuke (DNN)

5. OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers t…CVE-2014-022495% likely
6. The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data…CVE-2011-338973% likely
7. Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.CVE-2002-18727.0% likely
8. EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.CVE-2004-21726.8% likely
9. Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.CVE-2002-19106.3% likely
10. Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and ot…CVE-2014-14914.6% likely
11. On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with t…CVE-2017-142624.4% likely
12. The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers…CVE-2016-77983.2% likely
13. The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possi…CVE-2019-106393.2% likely
14. The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and S…CVE-2013-07643.1% likely
15. The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a…CVE-2005-03662.9% likely
16. lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server…CVE-2013-45082.6% likely
17. In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such t…CVE-2019-106382.6% likely
18. The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote…CVE-2011-4121OpenSSL · 2.5% likely

    OpenSSL

19. Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption StrengthCVE-2014-9199Clorius Controls · CVSS 10 · 2.5% likely
20. A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches…CVE-2020-25685dnsmasq · 2.2% likely
21. In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSC…CVE-2020-6966GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Statio… · 2.2% likely
22. A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.CVE-2012-2130polarssl · 2.2% likely
23. python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypassCVE-2013-2166python-keystoneclient · 2.1% likely
24. Cisco Digital Network Architecture Center Authentication Bypass VulnerabilityCVE-2018-0448Cisco · 2.1% likely

    Cisco

25. Apache Tomcat: Request/response mix-up with HTTP/2CVE-2024-52317Apache Software Foundation · CVSS 6.5 · 2.1% likely

    Apache

26. lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data…CVE-2018-65942.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.