CWE-327

High likelihood

Use of a Broken or Risky Cryptographic Algorithm

Parent: CWE-693 - Protection Mechanism Failure

The product uses a broken or risky cryptographic algorithm or protocol.

671 vulnerabilities with CWE-327
CVE-2014-9969 CRITICAL
Qualcomm Android GPS Client - Use of a Broken or Risky Cryptographic Algorithm
CVSS 9.8
CVE-2014-8687 CRITICAL
Seagate Business NAS <2015.00322 - RCE
CVSS 9.8
CVE-2013-20003 HIGH
Silicon Labs Z-Wave Firmware - Use of a Broken or Risky Cryptographic Algorithm via Shared Network Key
CVSS 8.3
CVE-2013-1053 MEDIUM
Remote-login-service <1.0.0-0ubuntu3 - Info Disclosure
CVSS 5.5
CVE-2013-2213 MEDIUM
KDE Paste Applet >=4.10.5 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 5.5
CVE-2013-2566 MEDIUM
Oracle Communications Application Session Controller 3.0.0-3.9.1 - Inadequate Encryption Strength via RC4 Algorithm
CVSS 5.9
CVE-2012-5623 HIGH
Squirrelmail change_passwd - Use of a Broken or Risky Cryptographic Algorithm
CVSS 7.5
CVE-2012-4449 CRITICAL
Apache Hadoop < 0.23.4, 1.x < 1.0.4, 2.x < 2.0.2 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 9.8
CVE-2011-2487 MEDIUM
Apache CXF 2.4.0-2.4.5 and WSS4J < 1.6.5 - Bleichenbacher Attack via PKCS#1 v1.5 Key Transport
CVSS 5.9
CVE-2009-2273
Huawei D100 Firmware - Unencrypted Wi-Fi Traffic Information Disclosure
CVE-2008-3775 MEDIUM
Folder Lock <5.9.5 - Info Disclosure
CVSS 4.4
CVE-2008-3188 HIGH
openSUSE 11.0 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 7.5
CVE-2007-6755
Dell Bsafe Crypto-C Micro Edition 3.0.0.0-3.0.0.20 and Bsafe Crypto-J - Use of a Broken or Risky Cryptographic Algorithm
CVE-2007-6013 CRITICAL
WordPress 1.5-2.3.1 - Authentication Bypass via MD5 Hash Reuse
CVSS 9.8
CVE-2007-5460 MEDIUM
Windows Mobile 5.0 - Weak Encryption via XOR Obfuscation in ActiveSync USB Connection
CVSS 4.6
CVE-2007-4150 HIGH
Visionsoft Audit <12.4.0.0 - Info Disclosure
CVSS 7.5
CVE-2005-4900 MEDIUM
Google Chrome < 47.0.2526.111 - Inadequate Encryption Strength via SHA-1 Collision
CVSS 5.9
CVE-2005-4860 HIGH
Spectrum Cash Receipting System <6.504 - Privilege Escalation
CVSS 7.8
CVE-2005-2946 HIGH
OpenSSL < 0.9.8 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 7.5
CVE-2002-2058 HIGH
TeeKai Tracking Online 1.0 - Weak Encryption of Web Usage Statistics
CVSS 7.5
CVE-1999-0007
C2Net Stronghold Web Server - Use of a Broken or Risky Cryptographic Algorithm
Details
Vulnerabilities 671
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits