共收录 43 条相关情报。
← 返回所有主题CVE-2026-13576
CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed wit
CVE-2026-118991
CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key. getC
CVE-2026-65629
Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a passwor
CVE-2026-116054
A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó
CVE-2026-116071
rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because th
CVE-2025-30049
The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 a
CVE-2026-111330
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as
CVE-2026-110104
Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext pa
CVE-2026-110104
Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext pa
CVE-2026-62376
Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-conf
CVE-2026-62376
### Summary Vikunja stores password-reset, email-confirmation, and account-deletion tokens in the `user_tokens` table i
CVE-2026-107829
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digest
CVE-2026-107829
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digest
CVE-2026-107829
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digest
CVE-2026-105804
Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.0 and cana
CVE-2026-105804
### Impact The password-hashing configuration used a lower work factor than what is recommended. ### Patches Payload no
CVE-2026-94206
Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkom
CVE-2026-105156
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/syste
CVE-2026-85497
CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insu
CVE-2026-92921
admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivatio