Lucene search
+L

6 matches found

EUVD
EUVD
added 2026/08/27 2:51 p.m.4 views

EUVD-2026-67068

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

8.7CVSS5.2AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/15 2:36 p.m.15 views

CVE-2026-9641

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy systems. These versions default to using 1000 iterations. Depending on the chosen algorithm, 220,000 to 1,400,000...

5.3CVSS5.3AI score0.00226EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/12 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-9641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be...

5.3CVSS6.1AI score0.00226EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/09 8:47 a.m.19 views

EUVD-2026-35386

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 6. The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow a...

7.5CVSS5.3AI score0.00121EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/09 8:47 a.m.12 views

CVE-2026-46749

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 6. The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow a...

7.5CVSS5.3AI score0.00121EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.32 views

PT-2026-47735

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 6. The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow a...

7.5CVSS5.3AI score0.00121EPSS
SaveExploits0References2
Rows per page
Query Builder