Все уязвимости

Inadequate encryption strength for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform

Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote...

Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

Active Directory Security Feature Bypass Vulnerability

SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash

Database backups are vulnerable to offline attacks. Backups created using a version prior to the...

Use of weak cryptographic key in TP-Link Archer C7

Meari weak XOR obfuscation

Note Mark: JWT Secret Weakness allows Full Account Takeover via token forgery

fast-jwt: Empty HMAC secret accepted via async key resolver - JWT auth bypass

light0011 cms UserModel.class.php sha1 weak password hash

Booking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable Token

Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ

diem-project diem SHA1 PluginDmUser.class.php weak password hash

Inadequate Encryption Strength in Slican telephone exchanges

Booking Calendar < 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking Hash

YzmCMS MD5 system.func.php password weak password hash

openssl_encrypt before 1.4.9 Weak Cryptographic Parameters

openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF

Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

`jwt` (Ruby gem) - empty-key HMAC bypass

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.6

Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key

joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)

aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key

S3 SSE-C Encryption Key Exposed in Plaintext via Config Endpoint (CVE-2025-41118 Pattern)

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling