Все уязвимости

In Modem, there is a possible information disclosure due to side channel information disclosure....

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify

Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python

Anviz CrossChex Standard Algorithm Downgrade

net: TLS 1.2 connections allowed on TLS 1.3 sockets

FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response

RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int

Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

Howyar｜WeenyGenius - Use of Insecure Protocol

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

SMB minimum protocol dialect defaults to SMB1

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

IBM i is Affected by Algorithm Downgrade in Transport Layer Security []

SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

Silent channel-binding authentication downgrade via unsupported certificate algorithms

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly la

Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure

Protocol Downgrade in Wapro ERP Desktop

psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During N

Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

Protocol Downgrade in SIMPLE.ERP