CWE-310 · Cryptography
Cryptographic Issues
2,283CVEs
0exploited
1with a public check
39likely (EPSS 10%+)
SortMost likely exploited
2,283 CVEs with CWE-310 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2001-1473CheckDeprecated SSHv1 Protocol DetectionSsh · Ssh · 2005-04-21 | – | 6.3% | 2005-04-21 |
| CVE-2015-0204The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA down…Openssl · Openssl · 2015-01-09 | – | 99% | 2015-01-09 |
| CVE-2014-8684CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently conduct PHP object inject…Codeigniter · Codeigniter · 2017-09-19 | – | 72% | 2017-09-19 |
| CVE-2014-7228Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2; Back…Joomla · Joomla! · 2014-11-03 | – | 56% | 2014-11-03 |
| CVE-2009-4655The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.Novell · Edirectory · 2010-02-26 | – | 51% | 2010-02-26 |
| CVE-2016-0736In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (…Apache Software Foundation · Apache HTTP Server · 2017-07-27 | – | 49% | 2017-07-27 |
| CVE-2012-1803RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote…Siemens · Ruggedcom Rugged Operating System · 2012-04-28 | – | 49% | 2012-04-28 |
| CVE-2015-3008Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5, 11.6 before 11.6-cert1…Digium · Asterisk · 2015-04-10 | – | 46% | 2015-04-10 |
| CVE-2012-2686crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of ser…Openssl · Openssl · 2013-02-08 | – | 40% | 2013-02-08 |
| CVE-2012-1923RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information b…Realnetworks · Helix Server · 2012-04-17 | – | 38% | 2012-04-17 |
| CVE-2014-8686CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP i…Codeigniter · Codeigniter · 2017-09-19 | – | 37% | 2017-09-19 |
| CVE-2013-0169The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on…Openssl · Openssl · 2013-02-08 | – | 36% | 2013-02-08 |
| CVE-2014-0092lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-…Gnu · Gnutls · 2014-03-06 | – | 30% | 2014-03-06 |
| CVE-2016-7270The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mec…Microsoft · .net Framework · 2016-12-20 | – | 23% | 2016-12-20 |
| CVE-2007-5863Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between the client and the server, using a mod…Apple · Mac Os X · 2007-12-19 | – | 23% | 2007-12-19 |
| CVE-2015-0205The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without…Openssl · Openssl · 2015-01-09 | – | 22% | 2015-01-09 |
| CVE-2014-3570The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it eas…Openssl · Openssl · 2015-01-09 | – | 22% | 2015-01-09 |
| CVE-2013-6449The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a…Openssl · Openssl · 2013-12-23 | – | 21% | 2013-12-23 |
| CVE-2013-0166OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause…Openssl · Openssl · 2013-02-08 | – | 20% | 2013-02-08 |
| CVE-2015-1067Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote at…Apple · Mac Os X · 2015-03-11 | – | 20% | 2015-03-11 |
| CVE-2015-1672Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performance degradation) via crafted enc…Microsoft · .net Framework · 2015-05-13 | – | 17% | 2015-05-13 |
| CVE-2014-1568Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before…Google · Chrome · 2014-09-25 | – | 17% | 2014-09-25 |
| CVE-2011-4108The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover…Openssl · Openssl · 2012-01-06 | – | 16% | 2012-01-06 |
| CVE-2015-2471Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network an…Microsoft · Xml Core Services · 2015-08-15 | – | 16% | 2015-08-15 |
| CVE-2013-6450The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which…Openssl · Openssl · 2014-01-01 | – | 15% | 2014-01-01 |
| CVE-2016-5419curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resu…Haxx · Libcurl · 2016-08-10 | – | 15% | 2016-08-10 |
| CVE-2014-8275OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprin…Openssl · Openssl · 2015-01-09 | – | 15% | 2015-01-09 |
| CVE-2011-4576The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers…Openssl · Openssl · 2012-01-06 | – | 14% | 2012-01-06 |
| CVE-2014-3568OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access re…Openssl · Openssl · 2014-10-19 | – | 14% | 2014-10-19 |
| CVE-2014-8730The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 t…F5 · Big-Iq Cloud · 2014-12-10 | – | 14% | 2014-12-10 |
| CVE-2013-0137The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private…Digital Alert Systems · Dasdec Eas · 2013-06-29 | – | 14% | 2013-06-29 |
| CVE-2013-4787Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows attackers to execute arbitrary code via an application pac…Google · Android · 2013-07-09 | – | 14% | 2013-07-09 |
| CVE-2012-0884The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes…Openssl · Openssl · 2012-03-13 | – | 13% | 2012-03-13 |
| CVE-2015-1637Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…Microsoft · Windows 7 · 2015-03-06 | – | 13% | 2015-03-06 |
| CVE-2012-2098Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote atta…Apache · Commons Compress · 2012-06-29 | – | 13% | 2012-06-29 |
| CVE-2011-1655The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecif…Broadcom · Total Defense · 2011-04-15 | – | 12% | 2011-04-15 |
| CVE-2015-2476The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold a…Microsoft · Windows 7 · 2015-08-15 | – | 11% | 2015-08-15 |
| CVE-2010-2011Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain…Microsoft · Dynamics Gp · 2010-05-21 | – | 11% | 2010-05-21 |
| CVE-2014-7878The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived from the Seed Node image, uses the same security keys across…Hp · Helion Cloud Development Platform · 2014-11-14 | – | 10% | 2014-11-14 |
| CVE-2013-4579The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC a…Linux · Linux Kernel · 2013-11-19 | – | 10% | 2013-11-19 |
| CVE-2010-3804The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for genera…Apple · Safari · 2010-11-20 | – | 9.1% | 2010-11-20 |
| CVE-2008-5100The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the di…Microsoft · .net Framework · 2008-11-17 | – | 8.4% | 2008-11-17 |
| CVE-2010-1128The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were…Php · Php · 2010-03-26 | – | 8.1% | 2010-03-26 |
| CVE-2010-1184The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject…Microsoft · 27mhz Wireless Keyboard · 2010-03-29 | – | 8.0% | 2010-03-29 |
| CVE-2010-0742The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain Orig…Openssl · Openssl · 2010-06-03 | – | 7.8% | 2010-06-03 |
| CVE-2014-1771SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allow…Microsoft · Internet Explorer · 2014-06-11 | – | 7.6% | 2014-06-11 |
| CVE-2012-3505Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged hea…Banu · Tinyproxy · 2012-10-09 | – | 7.3% | 2012-10-09 |
| CVE-2014-3613cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain…Haxx · Curl · 2014-11-18 | – | 7.1% | 2014-11-18 |
| CVE-2014-0035The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken,…Apache · Cxf · 2014-07-07 | – | 7.1% | 2014-07-07 |
| CVE-2016-3125The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellma…Proftpd · Proftpd · 2016-04-05 | – | 7.0% | 2016-04-05 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.