# weak_cryptography


- [CVE-2017-1000486](https://insights.sbomify.com/CVE-2017-1000486/): Primetek Primefaces Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-11317](https://insights.sbomify.com/CVE-2017-11317/): Telerik UI for ASP.NET AJAX Unrestricted File Upload (critical 9.8, exploited in the wild)
- [CVE-2017-9248](https://insights.sbomify.com/CVE-2017-9248/): Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness (critical 9.8, exploited in the wild)
- [CVE-2018-15811](https://insights.sbomify.com/CVE-2018-15811/): DotNetNuke (DNN) Inadequate Encryption Strength (high 7.5, exploited in the wild)
- [CVE-2018-18325](https://insights.sbomify.com/CVE-2018-18325/): DotNetNuke (DNN) Inadequate Encryption Strength (high 7.5, exploited in the wild)
- [CVE-2019-18988](https://insights.sbomify.com/CVE-2019-18988/): TeamViewer Desktop Bypass Remote Login (high 7.0, exploited in the wild)
- [CVE-2026-50086](https://insights.sbomify.com/CVE-2026-50086/): Aqara unauthenticated AES oracle (critical 10.0)
- [CVE-2026-44523](https://insights.sbomify.com/CVE-2026-44523/): Note Mark: JWT Secret Weakness allows Full Account Takeover via token forgery (critical 10.0)
- [CVE-2026-21718](https://insights.sbomify.com/CVE-2026-21718/): Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm (critical 10.0)
- [CVE-2025-12478](https://insights.sbomify.com/CVE-2025-12478/): Non-Compliant TLS Configuration (critical 10.0)
- [CVE-2025-12364](https://insights.sbomify.com/CVE-2025-12364/): Weak Password Policy (critical 10.0)
- [CVE-2020-14516](https://insights.sbomify.com/CVE-2020-14516/): Weak cryptography in Rockwell Automation FactoryTalk Services Platform (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/types/weak-cryptography/