CWE-757 · weakness in Input Validation and Logic
Selection of Less-Secure Algorithm During Negotiation
34 CVEs
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.
- Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks
- lack of keypinning in libzypp could lead to repository switching
- Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthenticated attacker could potentially exploit…
- An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3…
- A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the tra…
- eDirectory LDAP peer certificate validation issue
- Protocol Downgrade in Wapro ERP Desktop
- Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol
- downgrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolver
- Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token
- Philips Clinical Collaboration Platform Algorithm Downgrade
- The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and…
- In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with n…
- OpenSSL TLS 1.3 server may choose unexpected key agreement group
- Protocol Downgrade in SIMPLE.ERP
- IBM i is Affected by Algorithm Downgrade in Transport Layer Security []
- Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured
- Howyar｜WeenyGenius - Use of Insecure Protocol
- Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
- An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Drop Encryption Level attac…
- FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
- Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
- IBM Security Directory Suite information disclosure
- CVE-2023-7005
- Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') vulnerability. An unauthenticated attacker w…
- net: TLS 1.2 connections allowed on TLS 1.3 sockets
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.