СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
18| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-13576 CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes Продукт уточняется | Информационный | — | 0,1 % | 30.10.2026 | ||
| CVE-2026-96552 sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt sfturing / hosp_order | Средний | 2.3 | 0,23 % | PoC | 23.09.2026 | |
| CVE-2026-6217 Information Disclosure in Pik Online Software's Portal Pik Online Software Solutions Inc. / Pik Online Portal | Средний | 6.3 | 0,18 % | 04.09.2026 | ||
| CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component IBM / Integrated Analytics System | Средний | 5.9 | 0,21 % | Патч | 28.08.2026 | |
| CVE-2026-57263 A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password Siemens / LOGO! Soft Comfort | Высокий | 7.0 | 0,11 % | 11.08.2026 | ||
| CVE-2025-15544 Weak Credential Protection During TP-Link Omada Device Adoption TP-Link Systems Inc. / Omada Gateways · TP-Link Systems Inc. / Omada Switches | Средний | 6.9 | 0,34 % | Патч | 03.08.2026 | |
| CVE-2025-15631 Weak Credential Storage in TP-Link Omada Devices TP-Link Systems Inc. / Omada Gateways · TP-Link Systems Inc. / Omada Switches | Средний | 5.7 | 0,3 % | Патч | 03.08.2026 | |
| CVE-2026-45787 electerm's encrypt method not safe enough electerm / electerm · electerm | Средний | 6.0 | 0,11 % | 28.05.2026 | ||
| CVE-2026-9370 ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt ulisesbocchio / jasypt-spring-boot | Высокий | 6.3 | 0,2 % | PoC | 24.05.2026 | |
| CVE-2026-45027 WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php LabRedesCefetRJ / WeGIA | Высокий | 5.9 | 0,17 % | PoC | 27.05.2026 | |
| CVE-2025-36253 Multiple Vulnerabilities in IBM Concert Software. IBM / Concert | Средний | 5.9 | 0,23 % | Патч | 03.02.2026 | |
| CVE-2025-34208 Vasion Print (formerly PrinterLogic) Insecure Password Hashing Vasion / Print Virtual Appliance Host · Vasion / Print Application | Критический | 8.2 | 0,44 % | PoCПатч | 02.10.2025 | |
| CVE-2025-10205 Predictable Salt and Weak Hashing Algorithm ABB / FLXEON | Высокий | 8.7 | 0,22 % | 17.09.2025 | ||
| CVE-2025-53884 NeuVector has an insecure password storage vulnerable to rainbow attack SUSE / neuvector | Средний | 5.3 | 0,18 % | 17.09.2025 | ||
| CVE-2025-5922 Retrievable password hash protecting TSplus admin console TSplus / TSplus Remote Access | Средний | 4.8 | 0,1 % | 29.07.2025 | ||
| CVE-2025-27408 Manifest Uses a One-Way Hash without a Salt mnfst / manifest · manifest | Средний | 4.8 | 0,16 % | 28.02.2025 | ||
| CVE-2024-8453 PLANET Technology switch devices - Weak hash for users' passwords PLANET Technology / GS-4210-24PL4C hardware 2.0 · PLANET Technology / GS-4210-24P2S hardware 3.0 | Средний | 4.9 | 0,31 % | 30.09.2024 | ||
| CVE-2024-36440 An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /e n/a / n/a · swissphone / dical-red | Средний | 6.8 | 0,29 % | 22.08.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.