Base de CVEs

CVE-2025-66597 Alta · 7.5 CWE-327 09/02/2026

Use of a Broken or Risky Cryptographic Algorithm em Yokogawa Fast/tools

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithms, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-69929 Crítica · 9.8 CWE-327 29/01/2026

Use of a Broken or Risky Cryptographic Algorithm em N3uron Web User Interface

An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable string format

CVE-2025-62514 Alta · 7.1 CWE-327 29/01/2026

`libparsec_crypto` does not check for weak order point of curve 25519

Parsec is a cloud-based application for cryptographically secure file sharing. In versions on the 3.x branch prior to 3.6.0, `libparsec_crypto`, a component of the Parsec application, does not check for weak order point of Curve25519 when compiled with its RustCrypto backend. In practice this means an attacker in a man-in-the-middle position would be able to provide weak order points to both parties in the Diffie-Hellman exchange, resulting in a high probability to for both parties to obtain the same shared key (hence leading to a successful SAS code exchange, misleading both parties into thinking no MITM has occurred) which is also known by the attacker. Note only Parsec web is impacted (as Parsec desktop uses `libparsec_crypto` with the libsodium backend). Version 3.6.0 of Parsec patches the issue.

CVE-2026-24785 Crítica · 9.1 CWE-327 27/01/2026

Biblioteca Clatter em Rust (Noise): violação da regra de validade de PSK em padrões de handshake pós-quânticos

Clatter é uma implementação em Rust pura, compatível com no_std, do framework de protocolos Noise, com suporte a pós-quântico. Versões anteriores à 2.2.0 apresentam uma vulnerabilidade de conformidade com o protocolo. A biblioteca permitia padrões de handshake pós-quânticos que violavam a regra de validade de PSK (Seção 9.3 do Noise Protocol Framework). Isso poderia permitir que chaves derivadas de PSK fossem usadas para cifragem sem a devida randomização por aleatoriedade efêmera escolhida pelo próprio usuário, enfraquecendo garantias de segurança e potencialmente permitindo reutilização catastrófica de chaves. Os padrões padrão afetados incluem noise_pqkk_psk0, noise_pqkn_psk0, noise_pqnk_psk0, noise_pqnn_psk0, e algumas variantes híbridas. Usuários desses padrões podem ter utilizado handshakes que não atendem às propriedades de segurança pretendidas. O problema está totalmente corrigido e lançado no Clatter v2.2.0. A versão corrigida inclui verificações em tempo de execução para detectar padrões de handshake problemáticos. Como solução paliativa, evite o uso das variantes *_psk0 problemáticas de padrões pós-quânticos. Revise cuidadosamente padrões de handshake personalizados.

CVE-2026-22585 Crítica · 9.8 CWE-327 23/01/2026

Use of a Broken or Risky Cryptographic Algorithm em Salesforce Marketing Cloud Engagement

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026.

CVE-2025-58743 Alta · 7.5 CWE-327 20/01/2026

Insecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector Capture

Use of a Broken or Risky Cryptographic Algorithm (DES) vulnerability in the Password class in C2SConnections.dll in Milner ImageDirector Capture on Windows allows Encryption Brute Forcing to obtain database credentials.This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808.

CVE-2026-21907 Média · 5.9 CWE-327 15/01/2026

Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers), reducing the confidentiality of on-path traffic communicated across the connection. These ciphers also do not support Perfect Forward Secrecy (PFS), affecting the long-term confidentiality of encrypted communications.This issue affects all versions of Junos Space before 24.1R5.

CVE-2025-68702 Alta · 7.5 CWE-327 13/01/2026

Jervis has a SHA-256 Hex String Padding Bug

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses padLeft(32, '0') when it should use padLeft(64, '0') because SHA-256 produces 32 bytes which equates to 64 hex characters. This vulnerability is fixed in 2.2.

CVE-2025-68701 Alta · 7.5 CWE-327 13/01/2026

Jervis has Deterministic AES IV Derivation from Passphrase

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2.

CVE-2025-68698 Alta · 7.5 CWE-327 13/01/2026

Jervis has an RSA PKCS#1 v1.5 Padding Vulnerability

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses PKCS1Encoding which is vulnerable to Bleichenbacher padding oracle attacks. Modern systems should use OAEP (Optimal Asymmetric Encryption Padding). This vulnerability is fixed in 2.2.

CVE-2026-20833 Média · 5.5 CWE-327 13/01/2026

Windows Kerberos Information Disclosure Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.

CVE-2026-21444 Média · 5.5 CWE-327 02/01/2026

libtpms returns wrong initialization vector when certain symmetric ciphers are used

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.

CVE-2025-14175 Média · 6.5 CWE-327 29/12/2025

Weak Algorithm Support in SSH Server on TL-WR820N

A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent attacker to intercept and decrypt SSH traffic. Exploitation may expose sensitive information and compromise confidentiality.

CVE-2021-47712 Alta · 7.5 CWE-327 18/12/2025

Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.

CVE-2025-14764 Média · 5.3 CWE-327 17/12/2025

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow…

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade Amazon S3 Encryption Client for Go to version 4.0 or later.

CVE-2025-14763 Média · 5.3 CWE-327 17/12/2025

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may…

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade Amazon S3 Encryption Client for Java to version 4.0.0 or later.

CVE-2025-14762 Média · 5.3 CWE-327 17/12/2025

Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write…

Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade AWS SDK for Ruby to version 1.208.0 or later.

CVE-2025-14761 Média · 5.3 CWE-327 17/12/2025

Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write…

Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade AWS SDK for PHP to version 3.368.0 or later

CVE-2025-14760 Média · 5.3 CWE-327 17/12/2025

Use of a Broken or Risky Cryptographic Algorithm em AWS AWS SDK for C++

Missing cryptographic key commitment in the AWS SDK for C++ may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade AWS SDK for C++ to version 1.11.712 or later

CVE-2025-14759 Média · 5.3 CWE-327 17/12/2025

Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may…

Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade Amazon S3 Encryption Client for .NET to version 3.2.0 or later.

CVE-2025-14636 Baixa · 3.7 CWE-327 13/12/2025

Tenda AX9 httpd image_check weak hash

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks.

CVE-2025-54981 Alta · 7.5 CWE-327 12/12/2025

Apache StreamPark: Weak Encryption Algorithm in StreamPark

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are recommended to upgrade to version 2.1.7, which fixes the issue.

CVE-2025-65831 Alta · 7.5 CWE-327 10/12/2025

Use of a Broken or Risky Cryptographic Algorithm em Meatmeet

The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attacks on the traffic from a mobile device, or through another means, they may be able to crack the hash in a reasonable amount of time and gain unauthorized access to the victim's account.

CVE-2025-65849 Crítica · 9.1 CWE-327 08/12/2025

Altcha Proof-of-Work obfuscation mode cryptanalytic break

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated scraping / bots, not guarantee resistance to determined attackers." The documentation states “the goal is not to provide a secure cryptographic algorithm but to use a proof-of-work mechanism that allows any capable device to decrypt the hidden data.”

CVE-2025-66017 Alta · 8.2 CWE-327 25/11/2025

CGGMP21 presignatures can be used in the way that significantly reduces security

CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be used in the way that significantly reduces security. cggmp24 version 0.7.0-alpha.2 release contains API changes that make it impossible to use presignatures in contexts in which it reduces security.