Vulnerabilities > Inadequate Encryption Strength

DATE CVE VULNERABILITY TITLE RISK
2022-02-09 CVE-2022-24318 Inadequate Encryption Strength vulnerability in Schneider-Electric products
A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used.
network
low complexity
schneider-electric CWE-326
7.5
2022-01-05 CVE-2022-21653 Inadequate Encryption Strength vulnerability in Typelevel Jawn
Jawn is an open source JSON parser.
network
low complexity
typelevel CWE-326
7.5
2021-12-15 CVE-2021-42216 Inadequate Encryption Strength vulnerability in Anonaddy 0.8.5
A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.
network
low complexity
anonaddy CWE-326
critical
9.8
2021-12-13 CVE-2021-38947 Inadequate Encryption Strength vulnerability in IBM Spectrum Copy Data Management 2.2.0.0/2.2.13
IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5
2021-12-01 CVE-2021-20400 Inadequate Encryption Strength vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5
2021-11-23 CVE-2021-38891 Inadequate Encryption Strength vulnerability in IBM Sterling Connect:Direct
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5
2021-11-22 CVE-2021-44150 Inadequate Encryption Strength vulnerability in Transloadit Tusdotnet
The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.
network
low complexity
transloadit CWE-326
7.5
2021-11-15 CVE-2021-38983 Inadequate Encryption Strength vulnerability in IBM products
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5
2021-11-15 CVE-2021-38984 Inadequate Encryption Strength vulnerability in IBM products
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5
2021-11-12 CVE-2021-3789 Inadequate Encryption Strength vulnerability in Binatoneglobal products
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.
low complexity
binatoneglobal CWE-326
4.6