TYPE DE FAIBLESSE

CWE-326

26 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-326 (en anglais) →

CVE-2026-116054Les versions du logiciel SH3 antérieures à la 2026.0.2.0 sont concernées, plus précisément au sein des modules de gestion (Management) et de collecte (Collection). Ces composants t… 1.2 FAIBLE

CVE-2026-112029Les versions de Diem allant jusqu'à la 5.1.3 sont affectées par une faille dans le composant SHA1 Handler. Ce logiciel est utilisé pour la gestion des actifs numériques et des util… 1.1 FAIBLE

CVE-2026-112026Le CMS light0011 utilise une fonction spécifique dans son modèle d'utilisateur pour gérer la sécurité des mots de passe. La faille réside dans la manière dont le logiciel traite l'… 2.9 FAIBLE

CVE-2026-105156YzmCMS (versions 7.6 et antérieures) utilise une méthode de hachage des mots de passe trop faible, ce qui facilite le déchiffrement des empreintes (hashes) de mots de passe volées … 2.9 FAIBLE

CVE-2026-39349Les versions 5.0 à 5.8 d'OrangeHRM Open Source utilisent une méthode de chiffrement faible (AES-ECB) qui peut permettre à un attaquant d'identifier des schémas dans les données sen… 2.1 FAIBLE

CVE-2026-0510NetWeaver Application Server for Java utilise un algorithme de chiffrement obsolète pour protéger les données de mapping d'utilisateurs. Un attaquant disposant de privilèges admini… 3.0 FAIBLE

CVE-2025-45764jsrsasign v11.1.0 was discovered to contain weak encryption. NOTE: this issue has been disputed by a third party who believes that CVE IDs can be assigned for key lengths in specif… 3.2 FAIBLE

CVE-2025-7789A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin… 2.9 FAIBLE

CVE-2024-42177HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted … 2.6 FAIBLE

CVE-2025-2349A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/pas… 2.3 FAIBLE

CVE-2024-45719Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.0. The ids generated using the UUID v1 version are to some extent not… 2.6 FAIBLE

CVE-2023-6728Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obta… 3.3 FAIBLE

CVE-2024-30119HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection. 3.7 FAIBLE

CVE-2023-37397IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672. 3.6 FAIBLE

CVE-2023-28896Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CAN) bus in a form that… 3.3 FAIBLE

CVE-2023-31135Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a base… 3.3 FAIBLE

CVE-2023-2197HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanis… 2.5 FAIBLE

CVE-2022-35931Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, and 24.0.3 the random password g… 2.7 FAIBLE

CVE-2020-16235Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained. 3.8 FAIBLE

CVE-2021-20406IBM Security Verify Information Queue 1.0.6 and 1.0.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X… 2.2 FAIBLE

CVE-2020-25685A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches t… 3.7 FAIBLE

CVE-2018-1593IBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568. 3.7 FAIBLE

CVE-2018-17177An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core du… 2.4 FAIBLE

CVE-2017-9635Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password… 3.9 FAIBLE

CVE-2015-7449IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality Manag… 3.3 FAIBLE

CVE-2014-2381Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a creden… 2.1 FAIBLE