OWASP A04:2025 Cryptographic Failures vulnerabilities, newest first, page 52

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A04:2025 at MITRE.

1. 7.5CVE-2022-22385EPSS 0.4%2023-10-17

   IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text. IBM X-Force ID: 221962.

2. 7.5CVE-2023-30994EPSS 0.3%2023-10-14

   IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138

3. 9.1CVE-2020-27636EPSS 0.9%2023-10-10

   In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.

4. 9.1CVE-2020-27635EPSS 0.9%2023-10-10

   In PicoTCP 1.7.0, TCP ISNs are improperly random.

5. 9.1CVE-2020-27634EPSS 1.7%2023-10-10

   In Contiki 4.5, TCP ISNs are improperly random.

6. 9.1CVE-2020-27633EPSS 0.9%2023-10-10

   In FNET 4.6.3, TCP ISNs are improperly random.

7. 9.8CVE-2020-27631EPSS 1.1%2023-10-10

   In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.

8. 9.8CVE-2020-27630EPSS 1.1%2023-10-10

   In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.

9. 7.5CVE-2020-27213EPSS 1.0%2023-10-10

   An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of …

10. 7.8CVE-2023-43611EPSS 0.2%2023-10-10

    The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  This vulnerability is due to an incomplete fix for CVE-2023-38418.  Note: Software versions which have reac…

11. 5.9CVE-2023-5461EPSS 0.5%2023-10-09

    A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information.…

12. 6.5CVE-2023-5100EPSS 0.4%2023-10-09

    Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted.

13. 7.5CVE-2022-33160EPSS 0.3%2023-10-06

    IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568.

14. 4.4CVE-2023-23371EPSS 0.1%2023-10-06

    A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. …

15. 7.5CVE-2023-3361EPSS 0.5%2023-10-04

    A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster (ds pipeline server) and saves them in plain text in the …

16. 7.5CVE-2023-3350EPSS 0.3%2023-10-03

    A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the …

17. 7.5CVE-2022-47892EPSS 0.5%2023-10-03

    All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials.

18. 8.1CVE-2023-43660EPSS 0.3%2023-09-27

    Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending an SSH key offer without a signature. This allows bypassing authenticatio…

19. 7.5CVE-2023-4129EPSS 0.2%2023-09-27

    Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block …

20. 8.2CVE-2023-43125EPSS 0.3%2023-09-27

    BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

21. 7.1CVE-2023-43124EPSS 0.2%2023-09-27

    BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

22. 7.5CVE-2023-41305EPSS 0.5%2023-09-27

    Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.

23. 5.5CVE-2023-42811EPSS 0.2%2023-09-22

    aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even…

24. 6.5CVE-2023-42806EPSS 0.5%2023-09-21

    Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the…

25. 7.8CVE-2023-43637EPSS 0.1%2023-09-21

    Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey"…

26. 5.9CVE-2023-39252EPSS 0.4%2023-09-21

    Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive informa…

27. 7.5CVE-2023-42147EPSS 0.4%2023-09-20

    An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component.

28. 8.8CVE-2023-43635EPSS 0.1%2023-09-20

    Vault Key Sealed With SHA1 PCRs The measured boot solution implemented in EVE OS leans on a PCR locking mechanism. Different parts of the system update different PCR values in the TPM, resulting in a unique value for each PCR entry.…

29. 8.8CVE-2023-43630EPSS 0.1%2023-09-20

    PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not solve the problem of the config partition…

30. 6.5CVE-2022-47560EPSS 0.3%2023-09-20

    The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.

31. 6.1CVE-2022-47557EPSS 0.1%2023-09-19

    Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious action…

32. 7.5CVE-2022-3261EPSS 0.3%2023-09-15

    A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack overcloud update run, leading to a disclosure of sensitive information problem.

33. 2.5CVE-2023-4986EPSS 0.2%2023-09-15

    A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient compu…

34. 6.8CVE-2023-4680EPSS 0.4%2023-09-15

    HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decry…

35. 7.8CVE-2023-20236EPSS 0.1%2023-09-13

    A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification.…

36. 7.0CVE-2023-20135EPSS 0.09%2023-09-13

    A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to a time-of-check, time-of-use (TOC…

37. 8.8CVE-2023-4918EPSS 0.6%2023-09-12

    A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. …

38. 5.5CVE-2023-41764EPSS 1.0%2023-09-12

    Microsoft Office Spoofing Vulnerability

39. 9.8CVE-2023-29332EPSS 2.7%2023-09-12

    Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

40. 7.4CVE-2023-40729EPSS 0.3%2023-09-12

    A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle positi…

41. 7.8CVE-2023-40727EPSS 0.1%2023-09-12

    A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. This could allow an attacker to tamper the application code.

42. 7.5CVE-2023-41879EPSS 1.3%2023-09-11

    Magento LTS is the official OpenMage LTS codebase. Guest orders may be viewed without authentication using a "guest-view" cookie which contains the order's "protect_code". This code is 6 hexadecimal characters which is arguably not enough …

43. 5.3CVE-2023-41646EPSS 0.5%2023-09-07

    Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/

44. 8.1CVE-2023-34998EPSS 1.2%2023-09-05

    An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary authentication. An attacker can sniff …

45. 7.5CVE-2023-34353EPSS 1.2%2023-09-05

    An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network sniffing can lead to decryption of sensitive information. An att…

46. 5.9CVE-2023-22870EPSS 0.3%2023-09-05

    IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 244121.

47. 5.9CVE-2023-39982EPSS 0.4%2023-09-02

    A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded …

48. 9.8CVE-2023-39979EPSS 1.0%2023-09-02

    There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.

49. 8.1CVE-2023-4695EPSS 0.7%2023-09-01

    Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

50. 7.8CVE-2023-41744EPSS 0.1%2023-08-31

    Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.