TP-Link-TL-WR820N-CVE-2025-14175

🔐 CVE-2025-14175 SSH服务器中的弱算法支持 – TP-Link TL-WR820N 概述 本仓库记录了在 TP-Link TL-WR820N v2.80 路由器的 SSH服务器实现 中发现的一个安全漏洞。 该漏洞允许使用弱加密算法 ，可能暴露SSH流量的机密性。 该问题已被负责任地披露 ，由供应商修补 ，并被分配CVE-2025-14175 。 漏洞概述 产品 : TP-Link TL-WR820N v2.80 CVE ID : CVE-2025-14175 CWE : CWE-327 – 使用已损坏或有风险的加密算法 CVSS v4.0 : 6.0 中等 攻击向量 :...

CVE-2026-27871

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...

CVE-2026-27871

CVE-2026-27871 affects Johnson Controls TL280 (pre-5.63) with CWE-327: Use of a Broken or Risky Cryptographic Algorithm, enabling potential cryptanalytic access as described in the ICS advisory icsa-26-218-02. The vulnerability stems from weak cryptographic practices in TL280 prior to version 5.6...

CVE-2026-27871 TL280

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...

CVE-2026-27871

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...

EUVD-2026-58763

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...

GO-2026-5585 vulnerabilities

Vulnerabilities for packages: gatus-fips, versitygw, versitygw-fips, gatus...

CVE-2026-48386

CVE-2026-48386 concerns Adobe ColdFusion, describing a vulnerability in the use of a broken or risky cryptographic algorithm (CWE-327) that could lead to disclosure of sensitive memory. The issue is exploitable without user interaction and is rated high by the accompanying CVSS3.1 vector (AV:N/AC...

CVE-2026-48386 ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...

CVE-2026-48386 ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...

Security Bulletin: QRadar App SDK for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar App SDK has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-25645 DESCRIPTION:...

CVE-2026-48588 vulnerabilities

Vulnerabilities for packages: authentik-fips, authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

EUVD-2025-208314

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

EUVD-2020-28639

Malware in sbrugna...

EUVD-2020-28636

Malware in sbrugna...

EUVD-2022-37705

Malicious code in bioql PyPI...

EUVD-2024-42542

Malicious code in bioql PyPI...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to python_jose-3.3.0-py2.py3-none-any.whl CVE-2024-33663

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to pythonjose-3.3.0-py2.py3-none-any.whl CVE-2024-33663. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-33663 DESCRIPTION: python-jose could allow a remote...