weak_cryptography vulnerabilities
weak_cryptography in numbers
sbomify tracks 5,145 weak_cryptography vulnerabilities. Most are found in mobile app (40%), library (18%) and server software (18%).
How to fix weak_cryptography vulnerabilities
Most exploited weak_cryptography vulnerabilities
- CVE-2017-1000486 Primetek Primefaces Remote Code Execution
- CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload
- CVE-2017-9248 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness
- CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength
- CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength
- CVE-2019-18988 TeamViewer Desktop Bypass Remote Login
- CVE-2026-50086 Aqara unauthenticated AES oracle
- CVE-2026-44523 Note Mark: JWT Secret Weakness allows Full Account Takeover via token forgery
- CVE-2026-21718 Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm
- CVE-2025-12478 Non-Compliant TLS Configuration
- CVE-2025-12364 Weak Password Policy
- CVE-2020-14516 Weak cryptography in Rockwell Automation FactoryTalk Services Platform
Recently published
- CVE-2026-112041 diem-project diem dmString.php random weak prng
- CVE-2026-112193 Webkul Aureus ERP UserForm.php weak password
- CVE-2026-3161 IBM Cloud Pak System Risky Cryptographic Algorithm
- CVE-2026-6719 IBM Concert Software Use of Insufficiently Random Values
- CVE-2026-6930 IBM Concert Software Risky Cryptographic Algorithm
- CVE-2026-112006 OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation
Other types of vulnerability
- Cross-site scripting54,178
- Memory corruption53,628
- Denial of service36,532
- 35,428
- Missing authorization28,513
- SQL injection23,565
- Path traversal19,236
- 16,160
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.