최근 6개월의 모든 CVE를 매일 업데이트합니다.

3개 중 3개 표시

• 낮음CVE-2026-82759CVSS 점수 1.82026. 9. 17.

  Use of a One-Way Hash with a Predictable Salt vulnerability in team-alembic AshAuthentication allows readers of the audit store to recover the client IP addresses that the audit log add-on's :hash privacy mode is meant to pseudonymise. AshAuthentication.AddOn.

  CWE-760
• 높음CVE-2026-46749CVSS 점수 7.52026. 6. 9.

  A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient

  CWE-760siemens sinec_ins
• 낮음CVE-2026-9370CVSS 점수 3.72026. 5. 24.

  A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMCo

  CWE-759CWE-760