최근 6개월의 모든 CVE를 매일 업데이트합니다.

8개 중 8개 표시

• 중간CVE-2026-6217CVSS 점수 6.32026. 9. 4.

  Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1.

  CWE-759
• 중간CVE-2025-36271CVSS 점수 5.92026. 8. 28.

  IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  CWE-759ibm integrated_analytics_system
• 중간CVE-2026-57263CVSS 점수 6.82026. 8. 11.

  A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform effi

  CWE-759
• 중간CVE-2025-15631CVSS 점수 5.92026. 8. 3.

  A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid c

  CWE-759tp-link omada_fusion_2.5g_firmwaretp-link omada_fusion_2.5gtp-link omada_er707-m2_firmware
• 중간CVE-2025-15544CVSS 점수 5.92026. 8. 3.

  A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who succes

  CWE-759tp-link omada_oc200_v3_firmwaretp-link omada_oc200_v3tp-link omada_oc300_firmware
• 치명CVE-2026-45787CVSS 점수 9.12026. 5. 28.

  electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile

  CWE-326CWE-329CWE-353electerm_project electerm
• 중간CVE-2026-45027CVSS 점수 5.92026. 5. 27.

  WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash() function with the SHA-256 algorithm and no salt before comparing it to the stored value. The pa

  CWE-759CWE-916
• 낮음CVE-2026-9370CVSS 점수 3.72026. 5. 24.

  A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMCo

  CWE-759CWE-760