Vulnerabilities > Use of a Broken or Risky Cryptographic Algorithm

DATE CVE VULNERABILITY TITLE RISK
2023-08-09 CVE-2023-23346 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Hcltech Dryice Mycloud
HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm.
local
low complexity
hcltech CWE-327
7.1
2023-08-08 CVE-2023-37484 Use of a Broken or Risky Cryptographic Algorithm vulnerability in SAP Powerdesigner 16.7
SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during login attempt, which might allow an attacker to access password hashes from the client's memory.
network
low complexity
sap CWE-327
5.3
2023-07-19 CVE-2021-38933 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Sterling Connect:Express for Unix
IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-327
7.5
2023-07-14 CVE-2023-37464 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Cisco Cjose
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE).
network
low complexity
cisco CWE-327
7.5
2023-07-13 CVE-2023-34130 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Sonicwall Analytics and Global Management System
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data.
network
low complexity
sonicwall CWE-327
critical
9.8
2023-07-13 CVE-2023-21399 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Google Android
there is a possible way to bypass cryptographic assurances due to a logic error in the code.
local
low complexity
google CWE-327
7.8
2023-07-11 CVE-2023-36749 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Siemens products
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0).
network
high complexity
siemens CWE-327
7.4
2023-07-07 CVE-2023-35890 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Websphere Application Server 8.5.5.23/9.0.5.15/9.0.5.16
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file.
local
low complexity
ibm CWE-327
5.5
2023-07-03 CVE-2023-36608 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Ovarro products
The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.
network
low complexity
ovarro CWE-327
6.5
2023-06-27 CVE-2023-26276 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Qradar Security Information and Event Manager 7.5.0
IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-327
7.5