CWE-327 · Cryptography
Use of a Broken or Risky Cryptographic Algorithm
614CVEs
0exploited
2with a public check
9likely (EPSS 10%+)
SortMost likely exploited
614 CVEs with CWE-327 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-34039CheckVMWare Aria Operations - Remote Code ExecutionVmware · Aria Operations for Networks · CVSS 9.8 · 2023-08-29 | 9.8 | 67% | 2023-08-29 |
| CVE-2025-2539CheckFile Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Readthomstark · File Away · CVSS 7.5 · 2025-03-20 | 7.5 | 1.7% | 2025-03-20 |
| CVE-2013-2566The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via…Mozilla · Firefox · CVSS 5.9 · 2013-03-14 | 5.9 | 84% | 2013-03-14 |
| CVE-2015-2808The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remo…Huawei · Oceanstor Replicationdirector · CVSS 3.7 · 2015-04-01 | 3.7 | 74% | 2015-04-01 |
| CVE-2016-6602ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging acc…Zohocorp · Webnms Framework · 2017-01-23 | – | 56% | 2017-01-23 |
| CVE-2014-8687Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to…Seagate · Business Nas Firmware · 2017-06-08 | – | 44% | 2017-06-08 |
| CVE-2020-13777GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earlies…Gnu · Gnutls · 2020-06-04 | – | 22% | 2020-06-04 |
| CVE-2017-17428Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding ora…Cavium · Nitrox Ssl Sdk · 2018-03-05 | – | 15% | 2018-03-05 |
| CVE-2017-17382Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22…Citrix · Application Delivery Controller Firmware · 2017-12-13 | – | 14% | 2017-12-13 |
| CVE-2018-0734Timing attack against DSAOpenSSL · OpenSSL · 2018-10-30 | – | 12% | 2018-10-30 |
| CVE-2018-0737Cache timing vulnerability in RSA Key GenerationOpenSSL · OpenSSL · 2018-04-16 | – | 12% | 2018-04-16 |
| CVE-2019-0688An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.Microsoft · Windows Server · 2019-04-09 | – | 8.5% | 2019-04-09 |
| CVE-1999-0007Information from SSL-encrypted sessions via PKCS #1.C2net · Stonghold Web Server · 1999-09-29 | – | 8.5% | 1999-09-29 |
| CVE-2022-35513The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.Blink1 · Blink1control2 · 2022-09-07 | – | 6.2% | 2022-09-07 |
| CVE-2019-1543ChaCha20-Poly1305 with long noncesOpenSSL · OpenSSL · 2019-03-06 | – | 5.7% | 2019-03-06 |
| CVE-2015-0226Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier fo…Apache · Wss4j · 2017-10-30 | – | 5.5% | 2017-10-30 |
| CVE-2022-2097AES OCB fails to encrypt some bytesOpenSSL · OpenSSL · 2022-07-05 | – | 4.9% | 2022-07-05 |
| CVE-2018-0735Timing attack against ECDSA signature generationOpenSSL · OpenSSL · 2018-10-29 | – | 4.7% | 2018-10-29 |
| CVE-2020-6984Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prio…Rockwellautomation · Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Ser… · CVSS 9.8 · 2020-03-16 | 9.8 | 3.9% | 2020-03-16 |
| CVE-2021-45485In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't pr…Linux · Linux Kernel · 2021-12-25 | – | 3.8% | 2021-12-25 |
| CVE-2019-16116EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator passwo…Enterprisedt · Completeftp Server · 2019-10-02 | – | 3.7% | 2019-10-02 |
| CVE-2020-24588The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header…Ieee · Ieee 802.11 · 2021-05-11 | – | 3.6% | 2021-05-11 |
| CVE-2018-1000180Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-…Bouncycastle · Bc-Java · 2018-06-05 | – | 3.4% | 2018-06-05 |
| CVE-2007-6013Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the use…Wordpress · Wordpress · 2007-11-19 | – | 3.3% | 2007-11-19 |
| CVE-2022-0377LearnPress < 4.1.5 - Arbitrary Image RenamingThimpress · LearnPress · 2022-02-28 | – | 3.2% | 2022-02-28 |
| CVE-2021-23839Incorrect SSLv2 rollback protectionOpenSSL · OpenSSL · 2021-02-16 | – | 3.0% | 2021-02-16 |
| CVE-2020-26140An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network.…Alfa · Awus036h Firmware · 2021-05-11 | – | 2.9% | 2021-05-11 |
| CVE-2023-28244Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft · Windows Server 2019 · CVSS 8.1 · 2023-04-11 | 8.1 | 2.9% | 2023-04-11 |
| CVE-2020-9491In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpReq…Apache · Apache NiFi · 2020-10-01 | – | 2.9% | 2020-10-01 |
| CVE-2019-8237Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2…Adobe · Adobe Acrobat and Reader · 2019-10-23 | – | 2.8% | 2019-10-23 |
| CVE-2019-0187Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a jmeter-server using RemoteJMe…Apache Software Foundation · Apache JMeter · 2019-03-06 | – | 2.6% | 2019-03-06 |
| CVE-2020-24587The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted unde…Ieee · Ieee 802.11 · 2021-05-11 | – | 2.6% | 2021-05-11 |
| CVE-2021-2351Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vuln…Oracle Corporation · WebLogic Server · CVSS 8.3 · 2021-07-20 | 8.3 | 2.4% | 2021-07-20 |
| CVE-2019-6485Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Con…Citrix · Netscaler Gateway Firmware · 2019-02-22 | – | 2.3% | 2019-02-22 |
| CVE-2018-5745An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keysISC · BIND 9 · CVSS 4.9 · 2019-10-09 | 4.9 | 2.3% | 2019-10-09 |
| CVE-2007-5460Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a fixed key) when sending the user's PIN/Password over the USB connection from…Microsoft · Windows Mobile · 2007-10-15 | – | 2.2% | 2007-10-15 |
| CVE-2022-3365Emote Interactive Remote Mouse Server command injection due to weak encodingEmote Interactive · Remote Mouse Server · CVSS 9.8 · 2025-01-28 | 9.8 | 2.1% | 2025-01-28 |
| CVE-2023-37484Information Disclosure Vulnerabilities in SAP PowerDesignerSAP_SE · SAP PowerDesigner · CVSS 5.3 · 2023-08-08 | 5.3 | 2.0% | 2023-08-08 |
| CVE-2022-28382An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode (Electronic Codebook, aka ECB), an attacker may be able to…Verbatim · Keypad Secure Usb 3.2 Gen 1 Firmware · 2022-06-08 | – | 1.8% | 2022-06-08 |
| CVE-2016-3099mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote atta…Redhat · Enterprise Linux Desktop · 2017-06-08 | – | 1.8% | 2017-06-08 |
| CVE-2018-6829cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by readi…Gnupg · Libgcrypt · 2018-02-07 | – | 1.8% | 2018-02-07 |
| CVE-2021-31796An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough informa…Cyberark · Credential Provider · 2021-09-02 | – | 1.8% | 2021-09-02 |
| CVE-2011-2487The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.Apache · WSS4J · 2020-03-11 | – | 1.8% | 2020-03-11 |
| CVE-2019-9155A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduc…Openpgpjs · Openpgpjs · 2019-08-22 | – | 1.7% | 2019-08-22 |
| CVE-2020-11876airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC context. NOTE: the vendor states…Zoom · Meetings · CVSS 7.5 · 2020-04-17 | 7.5 | 1.7% | 2020-04-17 |
| CVE-2021-20305A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography poin…Nettle Project · nettle · 2021-04-05 | – | 1.7% | 2021-04-05 |
| CVE-2018-11057RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known…RSA · BSAFE Micro Edition Suite · CVSS 5.9 · 2018-08-31 | 5.9 | 1.7% | 2018-08-31 |
| CVE-2018-11070RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also know…Dell EMC · RSA BSAFE Crypto-J · CVSS 5.9 · 2018-09-11 | 5.9 | 1.7% | 2018-09-11 |
| CVE-2007-6755The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationsh…Dell · Bsafe Crypto-C-Micro-Edition · 2013-10-11 | – | 1.6% | 2013-10-11 |
| CVE-2019-9836Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecu…Amd · Secure Encrypted Virtualization Firmware · 2019-06-25 | – | 1.6% | 2019-06-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.