Use of a Broken or Risky Cryptographic Algorithm

Every one of the 614 is a mark on the map. Named now: 1 to 26, most at risk first.

1. VMWare Aria Operations - Remote Code ExecutionCVE-2023-34039Aria Operations for Networks · CVSS 9.8 · 67% likely
2. File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File ReadCVE-2025-2539thomstark · CVSS 7.5 · 1.7% likely
3. The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via…CVE-2013-2566CVSS 5.9 · 84% likely
4. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remo…CVE-2015-2808CVSS 3.7 · 74% likely
5. ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging acc…CVE-2016-660256% likely
6. Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to…CVE-2014-868744% likely
7. GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earlies…CVE-2020-1377722% likely
8. Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding ora…CVE-2017-1742815% likely
9. Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22…CVE-2017-1738214% likely
10. Timing attack against DSACVE-2018-0734OpenSSL · 12% likely

    OpenSSL

11. Cache timing vulnerability in RSA Key GenerationCVE-2018-0737OpenSSL · 12% likely

    OpenSSL

12. An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.CVE-2019-0688Microsoft · 8.5% likely

    Microsoft

13. Information from SSL-encrypted sessions via PKCS #1.CVE-1999-00078.5% likely
14. The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.CVE-2022-355136.2% likely
15. ChaCha20-Poly1305 with long noncesCVE-2019-1543OpenSSL · 5.7% likely

    OpenSSL

16. Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier fo…CVE-2015-02265.5% likely
17. AES OCB fails to encrypt some bytesCVE-2022-2097OpenSSL · 4.9% likely

    OpenSSL

18. Timing attack against ECDSA signature generationCVE-2018-0735OpenSSL · 4.7% likely

    OpenSSL

19. Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prio…CVE-2020-6984Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Ser… · CVSS 9.8 · 3.9% likely
20. In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't pr…CVE-2021-454853.8% likely
21. EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator passwo…CVE-2019-161163.7% likely
22. The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header…CVE-2020-245883.6% likely
23. Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-…CVE-2018-10001803.4% likely
24. Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the use…CVE-2007-60133.3% likely
25. LearnPress < 4.1.5 - Arbitrary Image RenamingCVE-2022-0377LearnPress · 3.2% likely
26. Incorrect SSLv2 rollback protectionCVE-2021-23839OpenSSL · 3.0% likely

    OpenSSL

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.