#cwe-759

共收录 13 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed with hmac_sha1_sum() from Mojo::Util with no key, a single f...

CVE-2026-13576

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed wit

来源摘录 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssm_pro/src/mai...

CVE-2026-96552

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected eleme

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3...

CVE-2026-6217

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Crypta

历史摘要 · 未重新核验 · NVD

安全公告2026-08-29 发布INFO

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic...

CVE-2025-36271

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-28 发布INFO

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVE-2025-36271

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 h...

CVE-2026-57263

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affec

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

A cryptographic weakness exists in affected Omada devices where site credentials are protected...

CVE-2025-15631

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

A cryptographic weakness exists in the Omada device adoption process.  During adoption,...

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials assoc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. ...

CVE-2025-15631

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak h...

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials assoc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and ...

CVE-2026-45787

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash() function wit...

CVE-2026-45027

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hash

历史摘要 · 未重新核验 · NVD

安全公告2026-05-14 发布INFO

electerm's encrypt method not safe enough

CVE-2026-45787

### Impact _Insecure sync encryption: deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC lead

历史摘要 · 未重新核验 · GitHub Advisory