#cwe-327

共收录 101 条相关情报。

漏洞预警2026-09-04 发布INFO

CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm.

CVE-2026-81859

CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken o

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-31 发布INFO

The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the auth...

CVE-2026-76133

The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditi

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-28 发布INFO

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway (RGW) protects STS sessi...

CVE-2026-39944

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-28 发布INFO

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts...

CVE-2025-30156

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

安全公告2026-08-27 发布INFO

Ceph: CephX AES Authentication error

CVE-2026-39944

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-327

安全公告2026-08-27 发布INFO

Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery

CVE-2025-30156

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-327

漏洞预警2026-08-20 发布INFO

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a mani...

CVE-2026-77151

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-310 #cwe-327

安全公告2026-08-20 发布INFO

lin-snow Ech0 crypto.go MD5Encrypt risky encryption

CVE-2026-77151

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-310 #cwe-327

安全公告2026-08-17 发布INFO

http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI

CVE-2026-54147

### Impact An issue in `DigestAuthProvider.verify`: **Algorithm silently forced to MD5.** The configured `algorithm`

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-327 #severity:medium

安全公告2026-08-14 发布INFO

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280...

CVE-2026-27871

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic At

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-327 #severity:low

漏洞预警2026-08-14 发布INFO

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63.

CVE-2026-27871

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic At

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-13 发布INFO

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts ...

CVE-2026-16459

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and

历史摘要 · 未重新核验 · NVD

#cve #cwe-208 #cwe-327

漏洞预警2026-08-13 发布INFO

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing...

CVE-2026-16458

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-208 #cwe-327

漏洞预警2026-08-11 发布INFO

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vul...

CVE-2026-48386

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-10 发布INFO

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data...

CVE-2026-66407

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket privat

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet en...

CVE-2026-8470

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-08-03 发布INFO

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdate...

CVE-2026-56609

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

安全公告2026-08-01 发布INFO

better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider...

CVE-2026-67336

better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that adve

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-327 #severity:critical

漏洞预警2026-08-01 发布INFO

better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that advertise the none algorithm and accept plain PKCE by default...

CVE-2026-67336

better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that adve

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

安全公告2026-08-01 发布INFO

better-auth before 1.6.11 Insecure Cryptographic Defaults via oidcProvider

CVE-2026-67336

better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that adve

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-327