26 matches found
CVE-2025-15629
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...
CVE-2025-15629 Weak Session Key Generation in TP-Link Omada Adoption Protocol
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...
SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications...
PYSEC-2026-748 SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications...
CVE-2025-66598: Use of a Broken or Risky Cryptographic Algorithm
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVR...
CVE-2025-31977
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions...
CVE-2025-31977
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions...
PT-2025-35108
Name of the Vulnerable Software and Affected Versions: HCL BigFix SM affected versions not specified Description: HCL BigFix SM is affected by a cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipula...
CVE-2013-2228
SaltStack RSA Key Generation allows remote users to decrypt communications...
PT-2025-8740
Name of the Vulnerable Software and Affected Versions SunGrow iSolarCloud Android app versions V2.1.6.20241017 and prior Description The issue concerns the use of an insecure AES key with insufficient entropy to encrypt client data. This could potentially allow attackers to decrypt intercepted...
CVE-2024-54848: Improper Certificate Validation
Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...
CVE-2024-0323
The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...
CVE-2024-0323 FTP uses unsecure encryption mechanisms
The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...
Citrix Licensing server vulnerability TLSv1.0/1.1 on CitrixWebServicesforLicensing
When running Qualis security report, it reports the following error : The CitrixWebServicesforLicensing TLSv1.0/1.1 vulnerbility on our Citrix Licensing server. An attacker can exploit cryptographic flaws to conduct man-in-the-middle type attacks or to decryption communications...
GHSA-GQ26-CPQ6-W85R SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications...
CVE-2020-1688
On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an...
PT-2020-5509
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 12.3X48-D105 Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 15.1X49-D190 Juniper Networks Junos OS on SRX Series and NFX Series versions prior t...
Code injection
SaltStack RSA Key Generation allows remote users to decrypt communications...
