Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.Mar 16, 2026
- Critical9.2A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication…Mar 12, 2026
- Medium5.3An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.Mar 10, 2026
- High8.7OpenClaw versions prior to 2026.2.15 use SHA-1 to hash sandbox identifier cache keys for Docker and browser sandbox configurations, which is deprecated and vulnerable…Mar 5, 2026
- Critical9.8Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, a…Mar 5, 2026
- High8.7Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string g…Mar 5, 2026
- High8.7Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Co…Mar 5, 2026
- Medium5.4A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions.Mar 4, 2026
- High7.5IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informationMar 3, 2026
- Medium5.9IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1Mar 3, 2026
- High7.5Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attackers to trivially…Mar 3, 2026
- High8.1An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing ma…Feb 27, 2026
- Critical9.1An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communicati…Feb 27, 2026
- Critical9.8An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achiev…Feb 27, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Feb 26, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript.Feb 24, 2026
- Medium5.3A flaw was found in GnuTLS.EPSS 0.7%Mar 21, 2024
- Medium5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.EPSS 4.9%Jul 5, 2022
- Medium5.9The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key.EPSS 1.2%May 3, 2022
- High8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Crypt…EPSS 1.7%Apr 5, 2021
- High7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).EPSS 22.3%Jun 4, 2020
- Medium5.9The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack.Apr 16, 2018
47 records · page 2 of 2
PreviousNext