Search Vulnerabilities

IBM i is Affected by Algorithm Downgrade in Transport Layer Security []

SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

Silent channel-binding authentication downgrade via unsupported certificate algorithms

Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured

net: TLS 1.2 connections allowed on TLS 1.3 sockets

Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python

Anviz CrossChex Standard Algorithm Downgrade

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure

psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

Dell NetWorker, versions 19

Protocol Downgrade in SIMPLE.ERP

Protocol Downgrade in Wapro ERP Desktop

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check

Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

IBM Security Directory Suite information disclosure

Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol

Weak Default SSL use in Port Forwarding Service