cve.bz

OWASP A04:2025 Cryptographic Failures vulnerabilities, newest first, page 69

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A04:2025 at MITRE.

Its weaknesses: 32

CWE-261, CWE-296, CWE-319, CWE-320, CWE-321, CWE-322, CWE-323, CWE-324, CWE-325, CWE-326, CWE-327, CWE-328, CWE-329, CWE-330, CWE-331, CWE-332, CWE-334, CWE-335, CWE-336, CWE-337, CWE-338, CWE-340, CWE-342, CWE-347, CWE-523, CWE-757, CWE-759, CWE-760, CWE-780, CWE-916, CWE-1240, CWE-1241

  1. 7.3CVE-2021-31841EPSS 0.2%

    A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gai…

  2. 8.1CVE-2021-40847EPSS 10%

    The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack. While the parental controls themselves are not enabled by default on t…

  3. 7.5CVE-2021-29750EPSS 0.7%

    IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778.

  4. 5.5CVE-2021-41061EPSS 0.2%

    In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots.

  5. 5.4CVE-2021-37186EPSS 0.4%

    A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), …

  6. 6.4CVE-2021-34709EPSS 0.2%

    Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for Cisco 8000 Series Routers could allow…

  7. 6.7CVE-2021-34708EPSS 0.2%

    Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for Cisco 8000 Series Routers could allow…

  8. 8.1CVE-2021-3051EPSS 0.6%

    An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected re…

  9. 7.5CVE-2021-1849EPSS 1.0%

    An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences.

  10. 8.8CVE-2021-38142EPSS 0.5%

    Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achieve remote code execution on any computer that tries to update Windows Sender due to the fa…

  11. 5.9CVE-2021-40530EPSS 1.2%

    The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator …

  12. 5.9CVE-2021-40529EPSS 1.5%

    The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined …

  13. 5.9CVE-2021-40528EPSS 1.4%

    The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generato…

  14. 5.3CVE-2021-38314ExploitEPSS 29%

    The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the `includes` function in `redux-core/class-redux-core.php` that were unique to a given …

  15. 4.4CVE-2021-31798EPSS 0.4%

    The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.

  16. 7.5CVE-2021-31796EPSS 1.8%

    An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough information that the number of possible keys (for a credential file…

  17. 5.1CVE-2021-31797EPSS 0.3%

    The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclosure.

  18. 9.8CVE-2021-34646ExploitEPSS 51%

    Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activ…

  19. 5.5CVE-2021-33003EPSS 0.2%

    Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.

  20. 7.5CVE-2021-29723EPSS 0.9%

    IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-ForceID: 201100.

  21. 7.5CVE-2021-29722EPSS 0.9%

    IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.

  22. 3.5CVE-2021-27913EPSS 0.5%

    The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to en…

  23. 5.9CVE-2021-39272EPSS 0.9%

    Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

  24. 9.8CVE-2021-33885EPSS 5.6%

    An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This resul…

  25. 7.5CVE-2021-33883EPSS 0.8%

    A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical value…

  26. 7.5CVE-2021-29704EPSS 0.7%

    IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  27. 7.5CVE-2021-34433EPSS 0.3%

    In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handshakes accidentally succeeds without verifying the server side's signature on the client side, if that signature is not i…

  28. 9.1CVE-2020-35685EPSS 2.1%

    An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of c…

  29. 7.5CVE-2021-31228EPSS 1.3%

    An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's r…

  30. 7.2CVE-2021-34715EPSS 1.1%

    A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with internal user privileges on the underl…

  31. 7.5CVE-2020-25926EPSS 1.3%

    The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). The attack vector is: a specific DNS resp…

  32. 5.5CVE-2021-0417EPSS 0.1%

    In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Pat…

  33. 6.1CVE-2021-39249EPSS 0.8%

    Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become predictable through a brute-force attack against the PHP mt_rand function.

  34. 7.8CVE-2021-3633EPSS 0.3%

    A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation.

  35. 9.8CVE-2020-36363EPSS 0.7%

    Amazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, which some entities consider to be weak ciphers.

  36. 9.8CVE-2021-38606EPSS 1.2%

    reNgine through 0.5 relies on a predictable directory name.

  37. 7.5CVE-2017-16632EPSS 0.7%

    In SapphireIMS 4097_1, the password in the database is stored in Base64 format.

  38. 3.1CVE-2021-3047EPSS 0.5%

    A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication se…

  39. 9.1CVE-2019-25052EPSS 0.9%

    In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information.

  40. 5.3CVE-2021-3692EPSS 1.7%

    yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

  41. 5.3CVE-2021-38373EPSS 0.5%

    In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.

  42. 7.5CVE-2021-3689EPSS 1.9%

    yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

  43. 7.8CVE-2021-36277EPSS 0.2%

    Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbit…

  44. 9.8CVE-2021-38195EPSS 0.9%

    An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.

  45. 7.5CVE-2021-37553EPSS 1.5%

    In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.

  46. 5.3CVE-2021-37551EPSS 0.7%

    In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.

  47. 5.3CVE-2021-37546EPSS 0.5%

    In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.

  48. 5.5CVE-2021-32003EPSS 0.2%

    Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.…

  49. 5.3CVE-2021-22923EPSS 2.0%

    When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will …

  50. 5.5CVE-2021-25444EPSS 0.8%

    An IV reuse vulnerability in keymaster prior to SMR AUG-2021 Release 1 allows decryption of custom keyblob with privileged process.