CWE-327

High likelihood

Use of a Broken or Risky Cryptographic Algorithm

Parent: CWE-693 - Protection Mechanism Failure

The product uses a broken or risky cryptographic algorithm or protocol.

687 vulnerabilities with CWE-327
CVE-2025-46371 LOW
Dell PowerFlex Manager (Appliance) - Use of a Broken or Risky Cryptographic Algorithm
CVSS 3.6
CVE-2025-14813 HIGH
GOSTCTR implementation unable to process more than 255 blocks correctly
CVSS 7.5
CVE-2025-14859 HIGH
Semtech LR11xx Secure Boot Bypass
CVE-2025-13916 MEDIUM
IBM Aspera Shares 1.9.9-1.11.0 - Weak Cryptography
CVSS 5.9
CVE-2025-41711 MEDIUM
Firmware Images - Info Disclosure
CVSS 5.3
CVE-2025-13476 CRITICAL
Rakuten Viber 25.7.2.0g/25.6.0.0-25.8.1.0 - Info Disclosure
CVSS 9.8
CVE-2025-14480 MEDIUM
IBM Aspera faspio Gateway 1.3.6 - Info Disclosure
CVSS 5.1
CVE-2025-14456 MEDIUM
IBM MQ Appliance 9.4 CD 9.4.4.0-9.4.4.1 - Vuln Type
CVSS 5.9
CVE-2025-63912 HIGH
Cohesity TranZman 4.0 Build 14614 - Info Disclosure
CVSS 7.5
CVE-2025-66598 HIGH
FAST/TOOLS <10.04 - Info Disclosure
CVSS 7.5
CVE-2025-66597 HIGH
Yokogawa Electric Corporation FAST/TOOLS <10.04 - Info Disclosure
CVSS 7.5
CVE-2025-69929 CRITICAL
N3uron Web User Interface 1.21.7-240207.1047 - Privilege Escalation via MD5 Password Hashing
CVSS 9.8
CVE-2025-62514 HIGH
Parsec 3.0.0-3.5.x - Weak Curve25519 Order Point Validation in RustCrypto Backend
CVSS 8.3
CVE-2025-52026 HIGH
Aptsys gemscms_backend < 2025-05-28 - Sensitive Information Exposure via /srvs/membersrv/getCashiers
CVSS 7.5
CVE-2025-58743 HIGH
Milner ImageDirector Capture <7.6.3.25808 - Use After Free
CVSS 7.5
CVE-2025-68931 HIGH
Jervis < 2.2 - Improper Authentication via AES/CBC/PKCS5Padding
CVSS 7.5
CVE-2025-68702 HIGH
Jervis < 2.2 - Use of a Broken Cryptographic Algorithm in SHA-256 Padding
CVSS 7.5
CVE-2025-68701 HIGH
Jervis < 2.2 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 7.5
CVE-2025-68698 HIGH
Jervis < 2.2 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 7.5
CVE-2025-14175 MEDIUM
TP-Link TL-WR820N v2.80 - Info Disclosure
CVSS 6.5
CVE-2025-14764 MEDIUM
Amazon S3 Encryption Client for Go < 4.0.0 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 5.3
CVE-2025-14763 MEDIUM
Amazon S3 Encryption Client for Java < 4.0.0 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 5.3
CVE-2025-14762 MEDIUM
AWS SDK for Ruby < 1.208.0 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 5.3
CVE-2025-14761 MEDIUM
AWS SDK for PHP < 3.368.0 - Missing Cryptographic Key Commitment
CVSS 5.3
CVE-2025-14760 MEDIUM
AWS SDK for C++ <1.11.712 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities 687
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits