CVE-2025-36271: Use of a One-Way Hash without a Salt

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-45027: Use of a One-Way Hash without a Salt

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash function with the SHA-256 algorithm and no salt before comparing it to the stored value. The password change flow in...

PT-2026-24580

Name of the Vulnerable Software and Affected Versions MR-GM5L-S1 MR-GM5A-L1 Description An authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication and change the device configuration. Recommendations At the moment, there is no...

CVE-2025-10205: Use of a One-Way Hash without a Salt

Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions...

CVE-2020-16244: Use of a One-Way Hash without a Salt

GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR vulnerability, puts the entire platform at high risk because an authenticated user can retrieve all user account data...

Plone Elevation of Privilege Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on the application server Zope. A privilege extraction vulnerability exists in webdav in Plone versions 5.0 through 5.1a1 and 4.0 through 4.3.9, which can be exploited by an attacker to...