CWE-326 · Cryptography
Inadequate Encryption Strength
407CVEs
4exploited
0with a public check
2likely (EPSS 10%+)
SortMost likely exploited
407 CVEs with CWE-326 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-1000486In CISA KEVExploitedPrimetek Primefaces 5.x - Remote Code ExecutionPrimetek · Primefaces Application · CVSS 9.8 · 2018-01-03 | 9.8 | 94% | 2018-01-03 |
| CVE-2017-11317In CISA KEVExploitedTelerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbit…Telerik · User Interface (UI) for ASP.NET AJAX · CVSS 9.8 · 2017-08-23 | 9.8 | 84% | 2017-08-23 |
| CVE-2018-15811In CISA KEVExploitedDotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie DeserializationDotNetNuke (DNN) · DotNetNuke (DNN) · CVSS 7.5 · 2019-07-03 | 7.5 | 76% | 2019-07-03 |
| CVE-2018-18325In CISA KEVExploitedDotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie DeserializationDotNetNuke (DNN) · DotNetNuke (DNN) · CVSS 7.5 · 2019-07-03 | 7.5 | 74% | 2019-07-03 |
| CVE-2014-0224OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers t…Openssl · Openssl · 2014-06-05 | – | 95% | 2014-06-05 |
| CVE-2011-3389The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data…Google · Chrome · 2011-09-06 | – | 73% | 2011-09-06 |
| CVE-2002-1872Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.Microsoft · Sql Server · 2005-06-28 | – | 7.0% | 2005-06-28 |
| CVE-2004-2172EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.Netsourcecommerce · Productcart · 2005-07-10 | – | 6.8% | 2005-07-10 |
| CVE-2002-1910Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.Click-2 · Ingenium Learning Management System · 2005-06-28 | – | 6.3% | 2005-06-28 |
| CVE-2014-1491Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and ot…Mozilla · Firefox · 2014-02-06 | – | 4.6% | 2014-02-06 |
| CVE-2017-14262On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with t…Samsung · Srn 1670d Firmware · 2017-09-11 | – | 4.4% | 2017-09-11 |
| CVE-2016-7798The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers…Ruby-Lang · Openssl · 2017-01-30 | – | 3.2% | 2017-01-30 |
| CVE-2019-10639The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possi…Linux · Linux Kernel · 2019-07-05 | – | 3.2% | 2019-07-05 |
| CVE-2013-0764The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and S…Mozilla · Firefox · 2013-01-13 | – | 3.1% | 2013-01-13 |
| CVE-2005-0366The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a…Gnupg · Gnupg · 2005-02-11 | – | 2.9% | 2005-02-11 |
| CVE-2013-4508lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server…Lighttpd · Lighttpd · 2013-11-08 | – | 2.6% | 2013-11-08 |
| CVE-2019-10638In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such t…Linux · Linux Kernel · 2019-07-05 | – | 2.6% | 2019-07-05 |
| CVE-2011-4121The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote…OpenSSL · OpenSSL extension of Ruby (Git trunk) · 2019-11-26 | – | 2.5% | 2019-11-26 |
| CVE-2014-9199Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption StrengthClorius Controls · A/S Java web client · CVSS 10 · 2015-01-17 | 10.0 | 2.5% | 2015-01-17 |
| CVE-2020-25685A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches…Thekelleys · dnsmasq · 2021-01-20 | – | 2.2% | 2021-01-20 |
| CVE-2020-6966In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSC…Gehealthcare · GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Statio… · 2020-01-24 | – | 2.2% | 2020-01-24 |
| CVE-2012-2130A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.polarssl · polarssl · 2019-12-06 | – | 2.2% | 2019-12-06 |
| CVE-2013-2166python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypasspython-keystoneclient · python-keystoneclient · 2019-12-10 | – | 2.1% | 2019-12-10 |
| CVE-2018-0448Cisco Digital Network Architecture Center Authentication Bypass VulnerabilityCisco · Cisco Digital Network Architecture Center (DNA Center) · 2018-10-05 | – | 2.1% | 2018-10-05 |
| CVE-2024-52317Apache Tomcat: Request/response mix-up with HTTP/2Apache Software Foundation · Apache Tomcat · CVSS 6.5 · 2024-11-18 | 6.5 | 2.1% | 2024-11-18 |
| CVE-2018-6594lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data…Dlitz · Pycrypto · 2018-02-03 | – | 2.0% | 2018-02-03 |
| CVE-2018-7242Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.…Schneider Electric SE · Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200 · 2018-04-18 | – | 1.9% | 2018-04-18 |
| CVE-2024-52318Apache Tomcat: Incorrect JSP tag recycling leads to XSSApache Software Foundation · Apache Tomcat · CVSS 6.1 · 2024-11-18 | 6.1 | 1.9% | 2024-11-18 |
| CVE-2018-20810Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure (…Ivanti · Connect Secure · 2019-03-16 | – | 1.8% | 2019-03-16 |
| CVE-2018-5184Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.Mozilla · Thunderbird ESR · 2018-06-11 | – | 1.7% | 2018-06-11 |
| CVE-2018-0131A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypt…Cisco Systems, Inc. · IOS and IOS XE · 2018-08-14 | – | 1.7% | 2018-08-14 |
| CVE-2020-26263RSA vulnerability in tslite-ngtlsfuzzer · tlslite-ng · CVSS 7.5 · 2020-12-21 | 7.5 | 1.5% | 2020-12-21 |
| CVE-2022-26307Weak Master KeysThe Document Foundation · LibreOffice · 2022-07-25 | – | 1.5% | 2022-07-25 |
| CVE-2013-7286MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithmAtt · Mobileiron Sentry · 2020-02-12 | – | 1.5% | 2020-02-12 |
| CVE-2009-2474neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, whi…Webdav · Neon · 2009-08-21 | – | 1.5% | 2009-08-21 |
| CVE-2013-7287MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.Mobileiron · Sentry · 2020-02-13 | – | 1.4% | 2020-02-13 |
| CVE-2016-9121go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check…Go-Jose Project · Go JOSE All versions before 1.0.4 · 2017-03-28 | – | 1.4% | 2017-03-28 |
| CVE-2019-14332An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is use of weak ciphers for SSH such as diffie-hellman-group1-sha1.Dlink · 6600-Ap Firmware · 2019-08-01 | – | 1.4% | 2019-08-01 |
| CVE-2017-14090A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.Trend Micro · Trend Micro ScanMail for Exchange · 2017-12-15 | – | 1.3% | 2017-12-15 |
| CVE-2017-1224IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.IBM · BigFix family · 2017-07-19 | – | 1.3% | 2017-07-19 |
| CVE-2019-4256IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 15…IBM · API Connect · CVSS 5.9 · 2019-05-29 | 5.9 | 1.3% | 2019-05-29 |
| CVE-2018-1751IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…IBM · Security Key Lifecycle Manager · CVSS 5.9 · 2019-01-23 | 5.9 | 1.3% | 2019-01-23 |
| CVE-2017-1695IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177.IBM · QRadar SIEM · CVSS 5.9 · 2019-02-15 | 5.9 | 1.3% | 2019-02-15 |
| CVE-2018-1608IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio…IBM · Rational Engineering Lifecycle Manager · CVSS 5.9 · 2019-05-01 | 5.9 | 1.3% | 2019-05-01 |
| CVE-2019-10112An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely d…Gitlab · Gitlab · 2019-05-16 | – | 1.3% | 2019-05-16 |
| CVE-2022-25156Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electr…Mitsubishielectric · Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC… · 2022-04-01 | – | 1.3% | 2022-04-01 |
| CVE-2019-19299A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All…Siemens · SiNVR/SiVMS Video Server · CVSS 7.5 · 2020-03-10 | 7.5 | 1.2% | 2020-03-10 |
| CVE-2021-42216A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.Anonaddy · Anonaddy · 2021-12-15 | – | 1.2% | 2021-12-15 |
| CVE-2020-10866An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to enumerate the network…Avast · Antivirus · 2020-04-01 | – | 1.2% | 2020-04-01 |
| CVE-2019-15806CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current b…Commscope · Tr4400 Firmware · 2019-08-29 | – | 1.2% | 2019-08-29 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.