كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 8 من 8

• متوسطةCVE-2026-69297درجة CVSS 6.508‏/09‏/2026

  Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.

  CWE-257microsoft windows_10_1607microsoft windows_10_1809microsoft windows_server_2012
• متوسطةCVE-2026-80176درجة CVSS 4.707‏/09‏/2026

  Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, l

  CWE-257dell secure_connect_gateway
• عاليةCVE-2026-65309درجة CVSS 7.531‏/07‏/2026

  ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all s

  CWE-257CWE-327
• متوسطةCVE-2026-1836درجة CVSS 5.312‏/06‏/2026

  The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.

  CWE-257
• متوسطةCVE-2026-22576درجة CVSS 4.314‏/04‏/2026

  A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR

  CWE-257CWE-522fortinet fortisoar
• متوسطةCVE-2026-22574درجة CVSS 4.114‏/04‏/2026

  A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR

  CWE-257CWE-522fortinet fortisoar
• حرجةCVE-2025-8095درجة CVSS 9.114‏/04‏/2026

  The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. OECH1 encodings should be considered exploitable and immed

  CWE-257
• عاليةCVE-2016-15058درجة CVSS 8.103‏/04‏/2026

  Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted

  CWE-257