CWE-320 · Cryptography
Key Management Errors
40CVEs
SortMost likely exploited
40 CVEs with CWE-320 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2015-0936Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of…Ceragon · Fibeair Ip-10 Firmware · 2017-06-01 | – | 78% | 2017-06-01 |
| CVE-2018-0732Client DoS due to large DH parameterOpenSSL · OpenSSL · 2018-06-12 | – | 47% | 2018-06-12 |
| CVE-2015-0839The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id fr…Hp · Linux Imaging And Printing · 2017-08-02 | – | 6.3% | 2017-08-02 |
| CVE-2018-0124A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execut…Cisco · Cisco Unified Communications Domain Manager · 2018-02-22 | – | 5.1% | 2018-02-22 |
| CVE-2016-9963Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.Exim · Exim · 2017-02-01 | – | 3.1% | 2017-02-01 |
| CVE-2016-2217The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.Dest-Unreach · Socat · 2017-01-30 | – | 2.5% | 2017-01-30 |
| CVE-2019-9894A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.Putty · Putty · 2019-03-21 | – | 2.4% | 2019-03-21 |
| CVE-2015-8542An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentica…Open-Xchange · Ox Guard · 2016-12-15 | – | 2.2% | 2016-12-15 |
| CVE-2016-1000346In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal detail…Bouncycastle · Bc-Java · 2018-06-04 | – | 2.1% | 2018-06-04 |
| CVE-2018-9234GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occ…Gnupg · Gnupg · 2018-04-04 | – | 2.0% | 2018-04-04 |
| CVE-2015-0153D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.Dlink · Dir-815 Firmware · 2018-04-12 | – | 1.9% | 2018-04-12 |
| CVE-2013-2233Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.Redhat · Ansible · 2018-05-04 | – | 1.9% | 2018-05-04 |
| CVE-2016-6886The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modu…Matrixssl · Matrixssl · 2017-01-13 | – | 1.7% | 2017-01-13 |
| CVE-2018-20187A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about…Botan Project · Botan · 2019-03-08 | – | 1.5% | 2019-03-08 |
| CVE-2019-5672NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the…NVIDIA · Jetson TX1 and TX2 · 2019-04-11 | – | 1.4% | 2019-04-11 |
| CVE-2019-9150Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or…Mailvelope · Mailvelope · 2019-07-09 | – | 1.4% | 2019-07-09 |
| CVE-2015-7503Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.Zend · Zend Framework · 2017-10-10 | – | 1.4% | 2017-10-10 |
| CVE-2018-15397Cisco Adaptive Security Appliance IPsec VPN Denial of Service VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · 2018-10-05 | – | 1.2% | 2018-10-05 |
| CVE-2016-10467In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD…Qualcomm, Inc. · Snapdragon Automobile, Snapdragon Mobile · 2018-04-18 | – | 1.2% | 2018-04-18 |
| CVE-2016-10421In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9…Qualcomm, Inc. · Snapdragon Mobile, Snapdragon Wear · 2018-04-18 | – | 1.2% | 2018-04-18 |
| CVE-2015-1316Juju Joyent provider uploads user's private ssh key by defaultUbuntu · Juju · CVSS 6.4 · 2019-04-22 | 6.4 | 1.2% | 2019-04-22 |
| CVE-2018-7559An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13…Opcfoundation · Ua-.net-Legacy · 2018-06-13 | – | 1.1% | 2018-06-13 |
| CVE-2021-26322Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.AMD · 1st Gen AMD EPYC™ · 2021-11-16 | – | 1.0% | 2021-11-16 |
| CVE-2017-13887In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. This was addressed with improved state management.Apple · Mac Os X · 2019-01-11 | – | 0.8% | 2019-01-11 |
| CVE-2015-4166Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.Cloudera · Key Trustee Server · 2017-03-23 | – | 0.7% | 2017-03-23 |
| CVE-2016-6879The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set…Botan Project · Botan · 2017-04-10 | – | 0.7% | 2017-04-10 |
| CVE-2014-2361OleumTech WIO Family Key Management ErrorsOleumTech · WIO DH2 Wireless Gateway · CVSS 7.2 · 2014-07-24 | 7.2 | 0.4% | 2014-07-24 |
| CVE-2019-12621Cisco HyperFlex Static SSL Key VulnerabilityCisco · Cisco HyperFlex HX-Series · CVSS 6.8 · 2019-08-21 | 6.8 | 0.4% | 2019-08-21 |
| CVE-2025-2220Odyssey CMS reCAPTCHA odyssey_contact_form.php key managementOdyssey · CMS · CVSS 3.3 · 2025-03-12 | 3.3 | 0.4% | 2025-03-12 |
| CVE-2024-36391MileSight DeviceHub - CWE-320: Key Management ErrorsMileSight · DeviceHub · CVSS 9.1 · 2024-06-02 | 9.1 | 0.4% | 2024-06-02 |
| CVE-2026-32897OpenClaw < 2026.2.22 - Authentication Token Reuse in Owner ID Prompt Hashing FallbackOpenClaw · OpenClaw · CVSS 3.7 · 2026-03-21 | 3.7 | 0.3% | 2026-03-21 |
| CVE-2017-18323Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9635M, MD…Qualcomm, Inc. · Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear · 2019-01-03 | – | 0.2% | 2019-01-03 |
| CVE-2017-18319Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W,…Qualcomm, Inc. · Snapdragon Mobile, Snapdragon Wear · 2019-01-03 | – | 0.2% | 2019-01-03 |
| CVE-2019-1586Cisco Application Policy Infrastructure Controller Recoverable Encryption Key VulnerabilityCisco · Cisco Application Policy Infrastructure Controller (APIC) · CVSS 4.6 · 2019-05-03 | 4.6 | 0.2% | 2019-05-03 |
| CVE-2026-56254capacitor-updater - End-to-End Encryption Bypass via Private Key Distributioncapacitor-updater · capacitor-updater · CVSS 7 · 2026-07-10 | 7.0 | 0.2% | 2026-07-10 |
| CVE-2016-2880IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340.IBM Corporation · QRadar SIEM · 2017-03-01 | – | 0.2% | 2017-03-01 |
| CVE-2018-7534In Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key may be left in memory.Unisys · Stealth Authorization Server · 2018-05-30 | – | 0.2% | 2018-05-30 |
| CVE-2024-40593A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versi…Fortinet · FortiAnalyzer · CVSS 5.9 · 2025-12-11 | 5.9 | 0.1% | 2025-12-11 |
| CVE-2023-21626Improper Authentication in HLOS.Qualcomm, Inc. · Snapdragon · CVSS 7.1 · 2023-08-08 | 7.1 | 0.1% | 2023-08-08 |
| CVE-2023-21652Key Management Errors in HLOSQualcomm, Inc. · Snapdragon · CVSS 7.7 · 2023-08-08 | 7.7 | 0.1% | 2023-08-08 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.