14682 matches found
CVE-2024-41763
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2023-43551
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...
CVE-2021-41096
Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...
CVE-2021-33020
Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key...
CVE-2022-23441
A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...
CVE-2022-26942
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment TEE modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure superviso...
CVE-2020-7846
Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page...
The vulnerability of the TIA Administrator software development environment is related to errors in checking the cryptographic signature, which allows a perpetrator to execute arbitrary code.
The vulnerability of the TIA Administrator software-related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software, related to the use of the default cryptographic key, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to the use of a default cryptographic key. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the software for centralized control of the Ruckus Network Director’s network infrastructure lies in the use of a hard-crypted cryptographic key. This allows attackers to circumvent existing security restrictions and gain increased privileges.
The vulnerability of the software for centralized control of the Ruckus Network Director is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain access to the RND server...
The vulnerability of the Docker Dpanel’s visual control panel, related to the use of a hard-coded cryptographic key, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Docker Dpanel’s visual control panel is related to the use of a hard-coded cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the software for centralized control of the Ruckus Network Director’s network infrastructure lies in the use of a hard-crypted cryptographic key. This allows attackers to circumvent existing security restrictions and gain increased privileges.
The vulnerability of the software for centralized control of the Ruckus Network Director is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain access to the RND server...
The vulnerability of the SAML Response Message Handler component in FortiOS operating systems, FortiWeb network layer for web applications, FortiProxy proxy server for protecting against internet attacks, and FortiSwitchManager local management platform allows attackers to bypass existing security mechanisms.
The vulnerability of the SAML Response Message Handler component in FortiOS operating systems, FortiWeb network layer for web applications, FortiProxy proxy server for protecting against internet attacks, and the local management platform FortiSwitchManager is related to deficiencies in the...
Use of a Cryptographic Primitive with a Risky Implementation
Overview org.webjars.npm:elliptic is a Fast elliptic-curve cryptography in a plain javascript implementation. Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation due to the incorrect computation of the byte-length of k value with leadin...
Use Of Hard-coded Cryptographic Key
github.com/neuvector/neuvector is vulnerable to use of hard-coded cryptographic key. The vulnerability is due to a cryptographic key being hard-coded and embedded in the source code at compilation time, which allows an attacker with access to the code or binaries to recover the key and decrypt...
CVE-2025-47333
Memory corruption while handling buffer mapping operations in the cryptographic driver...
CVE-2025-47345
Cryptographic issue may occur while encrypting license data...
IGEL OS < 11.0.0 Secure Boot bypass (CVE-2025-47827)
The version of IGEL OS running on the remote host is prior to version 11. It is, therefore, affected by a cryptographic signature verification vulnerability in the igel-flash-driver module. An attacker could exploit this flaw to bypass Secure Boot protections. By leveraging the improper...
