CWE-649 · 7 records
Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
CVEs in this class
7 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-10772No exploit | SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modificationsick ag · sick inspectorp61x · CWE-649 | High8.8 | — | 0.3% | Dec 6, 2024 |
34Monitor | CVE-2026-105208No exploit | ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokenszitadel · zitadel · CWE-649 | High8.7 | — | 0.1% | Oct 4, 2026 |
32Monitor | CVE-2026-95105No exploit | Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flippingdanielberkompas · cloak · CWE-649 | High8.2 | — | 0.1% | Oct 6, 2026 |
30Monitor | CVE-2019-3730No exploit | RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Edell · bsafe micro-edition-suite · CWE-649 | High7.5 | — | 0.6% | Sep 30, 2019 |
24Monitor | CVE-2025-41351No exploit | Weak encryption on Funambol's cloud serverfunambol · cloud server · CWE-649 | Medium6.0 | — | 0.2% | Jan 28, 2026 |
23Monitor | CVE-2010-3300No exploit | It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.owasp · enterprise security api for java · CWE-649 | Medium5.9 | — | 0.5% | Jun 22, 2021 |
21Monitor | CVE-2024-36279No exploit | Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" Afreefrom k.k. · "freefrom - the nostr client" app for android · CWE-649 | Medium5.3 | — | 0.1% | Jun 17, 2024 |
- CVE-2024-1077235Monitor
SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification
HighCVSS 8.8No exploitEPSS 0%sick ag · sick inspectorp61xDec 6, 2024
- CVE-2026-10520834Monitor
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
HighCVSS 8.7No exploitEPSS 0%zitadel · zitadelOct 4, 2026
- CVE-2026-9510532Monitor
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
HighCVSS 8.2No exploitEPSS 0%danielberkompas · cloakOct 6, 2026
- CVE-2019-373030Monitor
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information E
HighCVSS 7.5No exploitEPSS 1%dell · bsafe micro-edition-suiteSep 30, 2019
- CVE-2025-4135124Monitor
Weak encryption on Funambol's cloud server
MediumCVSS 6.0No exploitEPSS 0%funambol · cloud serverJan 28, 2026
- CVE-2010-330023Monitor
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
MediumCVSS 5.9No exploitEPSS 0%owasp · enterprise security api for javaJun 22, 2021
- CVE-2024-3627921Monitor
Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" A
MediumCVSS 5.3No exploitEPSS 0%freefrom k.k. · "freefrom - the nostr client" app for androidJun 17, 2024