Use of Password Hash With Insufficient Computational Effort

Davolink DVW-3200N all version prior to Version 1.00.06.

• Pre-auth

davolink · dvw-3200n firmwareAug 1, 2018

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256

• Pre-auth

rockwellautomation · factorytalk services platformMar 18, 2021

CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to

• Pre-auth
• Auth bypass

citrusdb · citrusdbFeb 14, 2005

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes

• Pre-auth

arkeia · arkeiaAug 31, 2001

An issue was discovered in BTITeam XBTIT 2.5.4.

• Pre-auth

btiteam · xbtitSep 5, 2018

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05.

• Pre-auth

vzug · combi-stream mslq firmwareOct 6, 2019

In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making

• Pre-auth

digi · realportOct 8, 2021

PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort

• Pre-auth

piigab · m-bus 900s firmwareJul 6, 2023

Command Injection Vulnerability

• pre-auth RCE
• Command injection

evehome · eve playJan 13, 2025

McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability

• Pre-auth

mcafee · network security managerJun 12, 2018

Use of Password Hash with Insufficient Computational Effort

• Pre-auth

tridium · niagaraMay 22, 2025

Use of Password Hash With Insufficient Computational Effort in Franklin Fueling System TS-550

• Pre-auth
• Auth bypass

franklinfueling · ts-550 evo firmwareNov 2, 2023

CareCam CM2507 Use of Password Hash With Insufficient Computational Effort

• Pre-auth

carecam · hmt.cm2507 firmwareSep 18, 2026

class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on micro

• Pre-auth

mfscripts · yetishareDec 30, 2019

All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort

bachmann · mx207 firmwareMay 19, 2022

openssl_encrypt before 1.4.9 Weak Pepper Key Derivation

• Pre-auth

jahlives · openssl encryptAug 27, 2026

openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus

• Pre-auth

jahlives · openssl encryptAug 27, 2026

Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack

• Pre-auth

kestra · kestraJun 26, 2026

RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the

• Pre-auth

starface · starfaceJun 15, 2023

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

redhat · enterprise linuxJun 12, 2024

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the has

• Pre-auth

ibm · spectrum protect for space managementApr 4, 2018

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account

redhat · keycloakNov 16, 2020

Weak secrethash can be brute-forced in livehelperchat/livehelperchat

• Pre-auth

livehelperchat · live helper chatApr 5, 2022

FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage

• Pre-auth

frontaccounting · frontaccountingAug 27, 2026

novel through 3.5.0 Unsalted MD5 Password Storage

• Pre-auth

xxyopen · novelOct 13, 2026