Lucene search
+L

107 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/31 11:52 a.m.•6 views

CLEANSTART-2026-TF73196 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/10/31 9:49 a.m.•22 views

xbootEncodePwd

xbootEncodePwd xboot-activiti-1.0-SNAPSHOT xboot-cms-1.0-SNAPSHOT xboot-generator-1.0-SNAPSHOT xboot-app-1.0-SNAPSHOT xboot-core-1.0-SNAPSHOT xboot-open-1.0-SNAPSHOT xboot-autochat-1.0-SNAPSHOT xboot-docking-1.0-SNAPSHOT xboot-quartz-1.0-SNAPSHOT xboot-base-1.0-SNAPSHOT xboot-ems-1.0-SNAPSHOT...

6.2AI score
SaveExploits0
osv_cleanstart
osv_cleanstart
•added 2026/10/31 12:37 a.m.•7 views

CLEANSTART-2026-KT08893 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/30 3:45 p.m.•6 views

CLEANSTART-2026-EI15702 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
NVD
NVD
•added 2026/10/30 12:16 p.m.•11 views

CVE-2026-110971

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 334 in version 10.02.002...

7.7CVSS0.0017EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/30 11:56 a.m.•8 views

CVE-2026-110971 Weak password encoding in Płatnik

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 334 in version 10.02.002...

7.7CVSS5.9AI score0.0017EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/30 11:56 a.m.•30 views

CVE-2026-110971 Weak password encoding in Płatnik

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 334 in version 10.02.002...

7.7CVSS0.0017EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/30 11:56 a.m.•10 views

EUVD-2026-113775

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 242 in version 10.02.002...

7.7CVSS5.9AI score0.0017EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/30 11:56 a.m.•17 views

CVE-2026-110971

The Płatnik software is impacted by a vulnerability involving the use of a weak password encoding algorithm . An attacker who obtains an encoded password can easily decode it to retrieve the original credentials. This issue was resolved in version 10.02.002 (metric 242). No specific exploit detai...

7.7CVSS5.9AI score0.0017EPSS
SaveExploits0References2
osv_cleanstart
osv_cleanstart
•added 2026/10/30 11:29 a.m.•7 views

CLEANSTART-2026-XK98834 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/10/30 12:00 a.m.•6 views

PT-2026-133449

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 242 in version 10.02.002...

7.7CVSS6AI score0.0017EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/30 12:00 a.m.•8 views

CVE-2026-110971: Zakład Ubezpieczeń Społecznych Płatnik: Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily…

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 334 in version 10.02.002...

7.7CVSS6AI score0.0017EPSS
SaveExploits0References2
osv_cleanstart
osv_cleanstart
•added 2026/10/28 12:38 a.m.•10 views

CLEANSTART-2026-UC16830 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/27 12:37 a.m.•11 views

CLEANSTART-2026-GQ21179 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the trino package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/22 12:38 a.m.•14 views

CLEANSTART-2026-LN18272 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/10 12:36 a.m.•18 views

CLEANSTART-2026-XW11767 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/08 12:38 a.m.•18 views

CLEANSTART-2026-AF46685 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

9.1CVSS6.4AI score0.00632EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/01 12:35 a.m.•14 views

CLEANSTART-2026-EQ95867 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

9.8CVSS6.4AI score0.00632EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2026/09/18 12:00 a.m.•21 views

Tenda G1 Router Command Execution

The vulnerability of the /etcro/shadow file in the Tenda G1 router microprogramming system is related to the use of fixed password encoding. Exploiting this vulnerability allows an attacker to execute arbitrary commands on behalf of the root user...

8.4CVSS7.3AI score0.0019EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2026/08/04 11:22 a.m.•26 views

CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

9.1CVSS0.00632EPSS
SaveExploits1References2
Rows per page
Query Builder