263 matches found
CVE-2020-12069
CVE-2020-12069 affects CODESYS V3 products containing CmpUserMgr prior to version 3.5.16.0. The CODESYS Control runtime stores online communication passwords using a weak hashing algorithm, enabling a local attacker with low privileges to gain full control of the device. Publicly documented produ...
PT-2022-8324 · 3S Smart Software Solutions +1 · Codesys V3 +1
Name of the Vulnerable Software and Affected Versions: CODESYS V3 products versions prior to 3.5.16.0 Pilz PMC programming tool versions 3.x prior to 3.5.17 Description: The issue is related to a weak hashing algorithm used for storing online communication passwords in the CODESYS Control runtime...
CVE-2022-4036
The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie...
CVE-2022-4036 Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie...
Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass
The plugin does not have a strong hashing algorithm on the CAPTCHA secret, and displays it to the user via a cookie, which could allow them to bypass the protection in place...
PT-2022-25362 · WordPress · Appointment Hour Booking
Name of the Vulnerable Software and Affected Versions: Appointment Hour Booking plugin for WordPress versions up to, and including, 1.3.72 Description: The issue is related to a CAPTCHA bypass due to the use of an insufficiently strong hashing algorithm on the CAPTCHA secret. This secret is also...
WordPress plugin Appointment Hour Booking 加密问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A weak algorithmic...
CVE-2022-29835
WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content...
GHSA-JXC4-W54C-QV5R Mattermost Server uses weak hashing for OAuth, email verification tokens and invitations
An issue was discovered in Mattermost Server before 3.8.2 and 3.7.5. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens...
Mattermost Server uses weak hashing for OAuth, email verification tokens and invitations
An issue was discovered in Mattermost Server before 3.8.2 and 3.7.5. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens...
PT-2022-15360 · Ibm · Ibm Mq Appliance
Name of the Vulnerable Software and Affected Versions: IBM MQ Appliance versions 9.2 CD and 9.2 LTS Description: The issue concerns local messaging users whose passwords are stored with a hash that provides insufficient protection. This could potentially allow unauthorized access to the system...
PT-2021-23996 · Myscada · Myscada Mypro
Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions 8.20.0 and prior Description: The issue concerns the storage of passwords using MD5, which may allow an attacker to crack previously retrieved password hashes. Recommendations: For mySCADA myPRO versions 8.20.0 and prio...
CVE-2021-23855
The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables...
Default credentials
The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables...
CVE-2021-23855
The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables...
CVE-2021-23855
CVE-2021-23855 affects Bosch Rexroth IndraMotion Mlc devices in multiple reports. The vulnerability arises from an exposed user/password database reachable via an unprotected web server resource, with passwords hashed using a weak hashing algorithm that could be cracked using rainbow tables. Publ...
CVE-2021-23855 Information disclosure
The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables...
PT-2021-15568 · Rexroth +1 · Indramotion Mlc Indramotion Xlc +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an exposed user and password database due to an unprotected web server resource. The passwords are hashed using a weak hashing algorithm, making them susceptible ...