Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

CVEs (480)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-24318 1Schneider Electric 3Clearscada Ecostruxure Geo Scada Expert 2019Ecostruxure Geo Scada Expert 2020 Jun 17, 2026 Feb 9, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions)...Show more A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)Show less
CVE-2022-21653 1Typelevel 1Jawn Jun 17, 2026 Jan 5, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Jawn is an open source JSON parser. Extenders of the `org.typelevel.jawn.SimpleFacade` and `org.typelevel.jawn.MutableFacade` who don't override `objectContext()` are vulnerable to a hash collision attack which may resul...Show more Jawn is an open source JSON parser. Extenders of the `org.typelevel.jawn.SimpleFacade` and `org.typelevel.jawn.MutableFacade` who don't override `objectContext()` are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, but inherit from a library. `jawn-parser-1.3.1` fixes this issue and users are advised to upgrade. For users unable to upgrade override `objectContext()` to use a collision-safe collection.Show less
CVE-2021-36337 1Dell 1Wyse Management Suite Jun 17, 2026 Dec 21, 2021 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby compromising Confidentiality and Integrity o...Show more Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby compromising Confidentiality and Integrity of data.Show less
CVE-2021-42216 1Anonaddy 1Anonaddy Jul 9, 2026 Dec 15, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.
CVE-2021-38947 1Ibm 1Spectrum Copy Data Management Jun 17, 2026 Dec 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242.
CVE-2021-20400 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Dec 1, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074.
CVE-2021-38891 1Ibm 1Sterling Connect\ Jun 17, 2026 Nov 23, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 209508.
CVE-2021-44150 1Transloadit 1Tusdotnet Jun 17, 2026 Nov 22, 2021 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.
CVE-2021-38984 1Ibm 2Security Guardium Key Lifecycle Manager Security Key Lifecycle Manager Jun 17, 2026 Nov 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793.
CVE-2021-38983 1Ibm 2Security Guardium Key Lifecycle Manager Security Key Lifecycle Manager Jun 17, 2026 Nov 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212792.
CVE-2021-3789 1Binatoneglobal 21Cn28 Firmware Cn40 FirmwareCn50 Firmware+18 more Jun 17, 2026 Nov 12, 2021 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update package...Show more An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.Show less
CVE-2021-39182 1Enrocrypt Project 1Enrocrypt Jun 17, 2026 Nov 8, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is consider...Show more EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`.Show less
CVE-2021-38464 1Inhandnetworks 1Ir615 Firmware Jun 17, 2026 Oct 19, 2021 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.
CVE-2021-38862 1Ibm 1Data Risk Manager Jun 17, 2026 Oct 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207980.
CVE-2021-38925 1Ibm 1Sterling B2b Integrator Jun 17, 2026 Oct 6, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171.
CVE-2021-23855 1Bosch 2Rexroth Indramotion Mlc Firmware Rexroth Indramotion Xlc Firmware Jun 17, 2026 Oct 4, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables.
CVE-2017-16632 1Sapphireims 1Sapphireims Nov 21, 2024 Aug 11, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
CVE-2021-37606 1Meow Hash Project 1Meow Hash Jun 17, 2026 Jul 30, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-runnin...Show more Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-running web service that allows the attacker to infer collisions by measuring timing differences.Show less
CVE-2021-28095 1Open Xchange 1Open Xchange Documents Jun 17, 2026 Jul 30, 2021 N/A· v4 4.8 MEDIUM· v3 5.8 MEDIUM· v2 OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.
CVE-2021-28094 1Open Xchange 1Open Xchange Documents Jun 17, 2026 Jul 30, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.

Previous 1...121314...24 Next