CVE-2020-26140Medium· 6.5▾ SunlitAn issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frame…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.9%
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
awus036h_firmware = 6.1316.1209scalance_w1748-1_firmwarescalance_w1750d_firmwarescalance_w1788-1_firmwarescalance_w1788-2_firmwarescalance_w1788-2ia_firmwarescalance_w721-1_firmwarescalance_w722-1_firmwarescalance_w734-1_firmwarescalance_w738-1_firmwarescalance_w748-1_firmwarescalance_w761-1_firmwarescalance_w774-1_firmwarescalance_w778-1_firmwarescalance_w786-1_firmwarescalance_w786-2_firmwarescalance_w786-2ia_firmwarescalance_w788-1_firmwarescalance_w788-2_firmwarescalance_wam763-1_firmwarescalance_wam766-1_firmwarescalance_wam766-1_6ghz_firmwarescalance_wum763-1_firmwarescalance_wum766-1_firmwarescalance_wum766-1_6ghz_firmwarec-100_firmwarec-110_firmwarec-120_firmwarec-130_firmwarec-200_firmwarec-230_firmwarec-235_firmwarec-250_firmwarec-260_firmwarec-65_firmwarec-75_firmwareo-105_firmwareo-90_firmwarew-118_firmwarew-68_firmware1100_firmware1100-4p_firmware1100-8p_firmware1101-4p_firmware1109-2p_firmware1109-4p_firmwareaironet_1532_firmwareaironet_1542d_firmwareaironet_1542i_firmwareaironet_1552_firmwareaironet_1552h_firmwareaironet_1560_firmwareaironet_1562d_firmwareaironet_1562e_firmwareaironet_1562i_firmwareaironet_1572_firmwareaironet_1702_firmwareaironet_1800_firmwareaironet_1800i_firmwareaironet_1810_firmwareaironet_1810w_firmwareaironet_1815_firmwareaironet_1815i_firmwareaironet_1832_firmwareaironet_1842_firmwareaironet_1852_firmwareaironet_2702_firmwareaironet_2800_firmwareaironet_2800e_firmwareaironet_2800i_firmwareaironet_3702_firmwareaironet_3800_firmwareaironet_3800e_firmwareaironet_3800i_firmwareaironet_3800p_firmwareaironet_4800_firmwareaironet_ap803_firmwareaironet_iw3702_firmwarecatalyst_9105_firmwarecatalyst_9105axi_firmwarecatalyst_9105axw_firmwarecatalyst_9115_firmwarecatalyst_9115_ap_firmwarecatalyst_9115axe_firmwarecatalyst_9115axi_firmwarecatalyst_9117_firmwarecatalyst_9117_ap_firmwarecatalyst_9117axi_firmwarecatalyst_9120_firmwarecatalyst_9120_ap_firmwarecatalyst_9120axe_firmwarecatalyst_9120axi_firmwarecatalyst_9120axp_firmwarecatalyst_9124_firmwarecatalyst_9124axd_firmwarecatalyst_9124axi_firmwarecatalyst_9130_firmwarecatalyst_9130_ap_firmwarecatalyst_9130axe_firmwarecatalyst_9130axi_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-59116Medium· 6.8Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-59745High· 7.5Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords
CVE-2025-34519High· 7.5Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an insecure hashing algorithm vulnerability. The product stores passwords using the MD5 hash function without applying a per‑password salt. Because MD5 is a fast, unsalted ha…
CVE-2019-1563Low· 3.7In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption …
CVE-2018-0734Medium· 5.9The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack
CVE-2018-0735Medium· 5.9The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack