#cwe-328

共收录 28 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful ...

CVE-2026-65104

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collision

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts ...

CVE-2026-46488

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布LOW

A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the componen...

CVE-2026-15605

CVE-2026-15605 是 wandb 0.25.2.dev1 版本中 Artifact Integrity Validation 组件的一个安全漏洞。漏洞位于 wandb/sdk/lib/hashutil.py 文件中的 Artif

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-10 发布INFO

R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this ...

CVE-2026-41879

R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the file libs/langgraph/langgraph/_internal/_cache.py of th...

CVE-2026-14742

A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the file src/exo/worker/engines/mlx/vision.py of the component ...

CVE-2026-14738

A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-04 发布INFO

A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the function get_conversation_history of the file 08_agentic_system/...

CVE-2026-14630

A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the functio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtai...

CVE-2026-10540

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perfor...

CVE-2026-13455

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obta...

CVE-2026-53692

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographical

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-28 发布INFO

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of ...

CVE-2026-13510

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in

历史摘要 · 未重新核验 · NVD

安全公告2026-06-23 发布INFO

phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing

CVE-2026-48488

### Summary Attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnerabl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-22 发布INFO

motionEye: Authentication possible via password hash

CVE-2026-46488

### Summary An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The applic

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-22 发布INFO

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, Angula...

CVE-2026-54266

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnera...

CVE-2026-48488

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the ...

CVE-2026-11481

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.L

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such man...

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file ind

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observat...

CVE-2026-11330

A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObserv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_...

CVE-2026-11329

A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布LOW

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulatio...

CVE-2026-10783

CVE-2026-10783 是一个影响 gradio-app 的 gradio 6.14.0 版本的安全漏洞。该漏洞位于 Audio Cache Key Handler 组件的 save_audio_to_cache 函数中,由于使用了弱

历史摘要 · 未重新核验 · NVD