CWE-325: CWE-325

Deno's node:crypto module before version 2.6.0 fails to properly finalize cipher operations, allowing attackers to perform infinite encryption attempt...

This vulnerability in Windows Kerberos allows attackers to bypass cryptographic validation steps, enabling privilege escalation over network connectio...

This vulnerability allows an unauthenticated remote attacker in a man-in-the-middle position to decrypt, read, modify, and re-encrypt data transmitted...

This vulnerability allows an unauthenticated remote attacker to impersonate a legitimate Cisco Touch 10 device during the pairing process, enabling un...

This vulnerability allows attackers to derive the encryption key used during Bluetooth pairing by exploiting insufficient validation of elliptic curve...

This vulnerability in MbedTLS allows attackers to forge LMS signatures when using hardware-accelerated hashing. An attacker who can induce faults in h...

CVE-2025-59339 is a vulnerability in The Bastion's session recording encryption script that fails to sign encrypted SSH session files when configured ...

This vulnerability in OpenSSL's low-level OCB API exposes the last 1-15 bytes of a message in cleartext and unauthenticated when using hardware-accele...