CWE-325

CWE-325 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-325, highest CVSS first.

  1. HIGH 8.1CVE-2026-1007982026-09-29

    Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    AI risk analysis on Exploit-DB.ai →

  2. LOW 3.1CVE-2026-96552public PoC2026-09-23

    A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssm_pro/src/main/java/cn/sfturing/utils/MD5.java of the component User Password Handler. The manip…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-16000public PoC2026-10-02

    Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can observe encrypted messages of known or chosen content to forge ciphertexts with valid au…

    AI risk analysis on Exploit-DB.ai →