CVE-2024-55539: Use of a Broken or Risky Cryptographic Algorithm

Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent Linux before build 39185, Acronis Cyber Protect 16 Linux before build 39938...

CVE-2024-28980

Dell RecoverPoint for VMs, versions 6.0.x contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2024-28980: Use of a Broken or Risky Cryptographic Algorithm

Dell RecoverPoint for VMs, versions 6.0.x contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2023-37395: Use of a Broken or Risky Cryptographic Algorithm

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data...

CVE-2024-53441: Use of a Broken or Risky Cryptographic Algorithm

An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack...

CVE-2024-43189: Use of a Broken or Risky Cryptographic Algorithm

IBM Concert Software 1.0.0 through 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2020-11916: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased...

CVE-2024-51556: Use of a Broken or Risky Cryptographic Algorithm

This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters through API request URL/payload leading to unauthorized access to sensiti...

CVE-2024-8452: Use of a Broken or Risky Cryptographic Algorithm

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...

CVE-2024-39583: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-39745: Use of a Broken or Risky Cryptographic Algorithm

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

GO-2022-0839 Use of a Broken or Risky Cryptographic Algorithm in Terraform in github.com/hashicorp/terraform

Use of a Broken or Risky Cryptographic Algorithm in Terraform in github.com/hashicorp/terraform...

CVE-2024-41270: Use of a Broken or Risky Cryptographic Algorithm

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

CVE-2024-28972: Use of a Broken or Risky Cryptographic Algorithm

Dell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-40465: Use of a Broken or Risky Cryptographic Algorithm

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file...

CVE-2024-30098: Use of a Broken or Risky Cryptographic Algorithm

Windows Cryptographic Services Security Feature Bypass Vulnerability...

CVE-2024-32852: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerability. An unprivileged network malicious attacker could potentially exploit this vulnerability, leading to data leaks...

CVE-2023-41928: Use of a Broken or Risky Cryptographic Algorithm

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses...

CVE-2023-38371: Use of a Broken or Risky Cryptographic Algorithm

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 261198...

PT-2024-24736

Name of the Vulnerable Software and Affected Versions Mia-Med Health Aplication versions prior to 1.0.14 Description The issue is related to the use of a broken or risky cryptographic algorithm, allowing signature spoofing by improper validation. Recommendations For versions prior to 1.0.14, upda...