CVE-2025-48823

Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network...

CVE-2025-48823

CVE-2025-48823: Windows Cryptographic Services vulnerability allowing an unauthenticated network attacker to disclose information. Connected data lists CVSS v3.1 base score 5.9 (Medium) with Confidentiality Impact high and no listed impact on integrity/availability. The only explicit detail in so...

CVE-2025-21422 Cryptographic Issues in Automotive

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

CVE-2022-25674

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...

CVE-2022-23138

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack...

CVE-2021-37063

There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices...

CVE-2020-9528

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

CVE-2024-43065

Cryptographic issues while generating an asymmetric key pair for RKP use cases...

CVE-2024-43065

Cryptographic issues while generating an asymmetric key pair for RKP use cases...

CVE-2024-43065 Exposed Dangerous Method or Function in HLOS

Cryptographic issues while generating an asymmetric key pair for RKP use cases...

CVE-2024-43065 Exposed Dangerous Method or Function in HLOS

Cryptographic issues while generating an asymmetric key pair for RKP use cases...

CVE-2024-43065

CVE-2024-43065 affects Qualcomm chipsets with cryptographic issues in the generation of asymmetric key pairs for RKP use cases. The root cause is a flaw in how key material is generated, leading to potential weaknesses in confidentiality and integrity. The CVSS base metrics indicate a high impact...

Siemens SCALANCE X-200RNA Switch Devices Cryptographic Issues (CVE-2015-0285)

The ssl3clienthello function in s3clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force...

CVE-2021-26095

The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption construction of the session cookie, may allow a remote attacker already in possession of a cookie to possibly reveal and alter or forge its...

CVE-2022-25652

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking...

Moxa EDR-G903 Series Routers EDR Cryptographic Issues (CVE-2012-4694)

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...

THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27)

Cybersecurity news can sometimes feel like a never-ending horror movie, can't it? Just when you think the villains are locked up, a new threat emerges from the shadows. This week is no exception, with tales of exploited flaws, international espionage, and AI shenanigans that could make your head...

Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers

Cybersecurity researchers have discovered severe cryptographic issues in various end-to-end encrypted E2EE cloud storage platforms that could be exploited to leak sensitive data. "The vulnerabilities range in severity: in many cases a malicious server can inject files, tamper with file data, and...

The vulnerability of the Windows Enroll Engine component in Windows operating systems allows a hacker to bypass security restrictions.

The vulnerability of the Windows Enroll Engine component in Windows operating systems is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

Information disclosure

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access...