CVE-2019-13539

CVE-2019-13539 affects Medtronic Valleylab FT10 and FX8 platforms (Exchange Client v3.4 and below; FT10 v4.0.0 and below; FX8 v1.1.0 and below) due to the use of the descrypt OS password hashing (CWE-328). The issue enables an attacker who can access the device to obtain local shell access and re...

PT-2019-13402

Name of the Vulnerable Software and Affected Versions Medtronic Valleylab Exchange Client versions 3.4 and below Valleylab FT10 Energy Platform VLFT10GEN software versions 4.0.0 and below Valleylab FX8 Energy Platform VLFX8GEN software versions 1.1.0 and below Description The issue concerns the u...

CVE-2019-17216

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. Password authentication uses MD5 to hash passwords. Cracking is possible with minimal effort...

CVE-2019-17216

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. Password authentication uses MD5 to hash passwords. Cracking is possible with minimal effort...

CVE-2019-15087

An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution...

Remote code execution

An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution...

CVE-2019-15087

An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution...

CVE-2019-15087

PRiSE adAS 1.7.0 is affected by CVE-2019-15087. An authenticated attacker can alter the hash function used for passwords, enabling remote code execution. Several connected sources (NVD, Red Hat advisory, CVE listings) corroborate the same vector in PRiSE adAS 1.7.0, but no concrete exploit detail...

PT-2019-13978

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0 Description An issue allows an authenticated user to change the function used to hash passwords to any function, leading to remote code execution. Recommendations For PRiSE adAS version 1.7.0, at the moment, there is n...

CVE-2019-15087: Improper Control of Generation of Code

An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution...

CVE-2019-10855

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database...

Default credentials

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database...

PT-2019-12059

Name of the Vulnerable Software and Affected Versions Computrols CBAS version 18.0.0 Description The issue concerns the mishandling of password hashes. Specifically, it uses the MD5 hashing algorithm with a 'pw' prefix. For example, if the password is 'admin', it calculates the MD5 hash of...

Denial Of Service (DoS)

PostgreSQL is an advanced object-relational database management system DBMS. A flaw was found in the way the crypt password hashing function from the optional PostgreSQL pgcrypto contrib module performed password transformation when used with the DES algorithm. If the password string to be hashed...

PT-2019-5719

Name of the Vulnerable Software and Affected Versions Advantech BB-ERT351 affected versions not specified Description The issue is related to the use of an insecure cryptographic algorithm for password hashing in the Advantech BB-ERT351 network router's firmware. This could allow a remote attacke...

Out-of-bounds

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...

CVE-2019-7649

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...

CVE-2019-7649

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...

CVE-2019-7649

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...

CVE-2019-7649

CMSWing 1.3.7 contains a weakness in global.encryptPassword (bootstrap/global.js) where password hashing relies on multiple MD5 operations. This is documented as a weak‑encryption vulnerability that can be brute‑forced, potentially allowing an attacker to break user passwords. The CVE is corrobor...