Vulnerabilities > Inadequate Encryption Strength

DATE CVE VULNERABILITY TITLE RISK
2023-06-30 CVE-2023-36539 Inadequate Encryption Strength vulnerability in Zoom products
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
network
low complexity
zoom CWE-326
7.5
2023-06-07 CVE-2023-33283 Inadequate Encryption Strength vulnerability in Marvalglobal MSM
Marval MSM through 14.19.0.12476 uses a static encryption key for secrets.
local
low complexity
marvalglobal CWE-326
5.5
2023-06-02 CVE-2023-23597 Inadequate Encryption Strength vulnerability in Mozilla Firefox
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the <code>file://</code> context.
network
low complexity
mozilla CWE-326
6.5
2023-06-02 CVE-2023-29549 Inadequate Encryption Strength vulnerability in Mozilla Firefox and Focus
Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm.
network
low complexity
mozilla CWE-326
6.5
2023-05-24 CVE-2023-33982 Inadequate Encryption Strength vulnerability in Briarproject Briar
Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts.
network
high complexity
briarproject CWE-326
5.9
2023-05-18 CVE-2022-45453 Inadequate Encryption Strength vulnerability in Acronis Cyber Protect 15
TLS/SSL weak cipher suites enabled.
network
low complexity
acronis CWE-326
7.5
2023-05-17 CVE-2023-31135 Inadequate Encryption Strength vulnerability in Dgraph
Dgraph is an open source distributed GraphQL database.
local
low complexity
dgraph CWE-326
5.5
2023-05-17 CVE-2023-1764 Inadequate Encryption Strength vulnerability in Canon IJ Network Tool
Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the communication of the software.
low complexity
canon CWE-326
6.5
2023-05-15 CVE-2022-4048 Inadequate Encryption Strength vulnerability in Codesys Development System V3
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
local
low complexity
codesys CWE-326
7.7
2023-05-11 CVE-2023-2443 Inadequate Encryption Strength vulnerability in Rockwellautomation Thinmanager
Rockwell Automation ThinManager product allows the use of medium strength ciphers.
network
low complexity
rockwellautomation CWE-326
7.5