CWE-327

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was fou

BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cr

IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected c

The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity

DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE suppor

ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependen

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reve

Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root

The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use o

An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt

In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure crypt

Apache Hadoop before 0.23.4, 1.x before 1.0.4, and 2.x before 2.0.2 generate token passwords using a 20-bit secret when

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP

An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired al

In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password lo

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all ve

The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch

An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows

mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, an

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.8

In the "NQ Contacts Backup & Restore" application 1.1 for Android, DES encryption with a static key is used to secure tr

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting

IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow

A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vu

FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys,

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build

The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to th

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A datab