Lucene search
+L

6 matches found

OSV
OSV
•added 2026/09/17 12:33 p.m.•11 views

CVE-2026-92921 admin3 through 3.0.0 Weak Password Hashing via Single-Round MD5

admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivation function. Attackers with database access can recover plaintext passwords through offline dictionary or brute-force attacks due to negligible computational effort...

6.9CVSS5.9AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•26 views

PT-2026-90526

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The administrative password is hashed using a weak, fast algorithm for the credential store of one authentication path. Additionally, the file containing this...

6.9CVSS5.7AI score0.00089EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/07/01 7:52 a.m.•19 views

CVE-2026-10540 Weak password hash protection in Control-M/Entreprise Manager

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentiall...

5.6CVSS5.8AI score0.00106EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•10 views

CVE-2026-10540: Use of Weak Hash

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentiall...

5.6CVSS5.8AI score0.00106EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/26 12:00 a.m.•8 views

CVE-2026-55069: Use of Password Hash With Insufficient Computational Effort

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

8.7CVSS5.9AI score0.00244EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/10/02 12:00 a.m.•19 views

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in the Vasion Print Virtual Appliance Host and Application that stems from the use of unsalted SHA-512 hashes and unsalted SHA-1 hashes to store user passwords,...

8.2CVSS6.8AI score0.00437EPSS
SaveExploits1References4
Rows per page
Query Builder