最近六个月的全部 CVE，每天更新。

显示 8 条中的 8 条

• 中CVE-2026-6217CVSS 评分 6.32026年9月4日

  Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1.

  CWE-759
• 中CVE-2025-36271CVSS 评分 5.92026年8月28日

  IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  CWE-759ibm integrated_analytics_system
• 中CVE-2026-57263CVSS 评分 6.82026年8月11日

  A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform effi

  CWE-759
• 中CVE-2025-15631CVSS 评分 5.92026年8月3日

  A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid c

  CWE-759tp-link omada_fusion_2.5g_firmwaretp-link omada_fusion_2.5gtp-link omada_er707-m2_firmware
• 中CVE-2025-15544CVSS 评分 5.92026年8月3日

  A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who succes

  CWE-759tp-link omada_oc200_v3_firmwaretp-link omada_oc200_v3tp-link omada_oc300_firmware
• 严重CVE-2026-45787CVSS 评分 9.12026年5月28日

  electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile

  CWE-326CWE-329CWE-353electerm_project electerm
• 中CVE-2026-45027CVSS 评分 5.92026年5月27日

  WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash() function with the SHA-256 algorithm and no salt before comparing it to the stored value. The pa

  CWE-759CWE-916
• 低CVE-2026-9370CVSS 评分 3.72026年5月24日

  A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMCo

  CWE-759CWE-760