Vulnerabilities (CVE)

Filtered by CWE-320
Total 44 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-4166 1 Cloudera 1 Key Trustee Server 2017-03-27 7.5 HIGH 9.8 CRITICAL
Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.
CVE-2016-2880 1 Ibm 1 Qradar Security Information And Event Manager 2017-03-09 2.1 LOW 7.8 HIGH
IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340.
CVE-2016-9963 3 Canonical, Debian, Exim 3 Ubuntu Linux, Debian Linux, Exim 2017-02-15 2.6 LOW 5.9 MEDIUM
Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
CVE-2016-6886 1 Matrixssl 1 Matrixssl 2017-01-18 5.0 MEDIUM 7.5 HIGH
The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange.