Advisories · Weakness
CWE-759.
Every Advisory and CVE whose sources give the weakness CWE-759, newest first.
- CVSS 7.5 High
CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes
- Weak cryptography or TLS
- CWE-759
- CVSS 2.3 Low
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
- sfturing hosp_order
- CWE-325
- CWE-759
- CVSS 6.3 Medium
Information Disclosure in Pik Online Software's Portal
- Pik Online Software Solutions Inc. Pik Online Portal
- CWE-759
- CVSS 5.9 Medium
IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component
- IBM Integrated Analytics System
- CWE-759
- CVSS 7.0 High
A vulnerability has been identified in LOGO!
- Siemens LOGO! Soft Comfort
- CWE-759
- CVSS 5.7 Medium
Weak Credential Storage in TP-Link Omada Devices
- TP-Link Systems Inc. Omada Gateways
- TP-Link Systems Inc. Omada Switches
- CWE-759
- CVSS 6.9 Medium
Weak Credential Protection During TP-Link Omada Device Adoption
- TP-Link Systems Inc. Omada Gateways
- TP-Link Systems Inc. Omada Switches
- CWE-759
- CVSS 5.9 Medium
WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php
- LabRedesCefetRJ WeGIA
- Weak cryptography or TLS
- CWE-759
- CVSS 6.3 Medium
jasypt-spring-boot Uses a One-Way Hash without a Salt
- CWE-759
- CWE-760
>=3.0.0, <=4.0.4 · no fixed version yet
GHSA-jgj7-c8vj-w563 · CVE-2026-9370 - CVSS 6.0 Medium
electerm's encrypt method not safe enough
- Weak cryptography or TLS
- CWE-329
<3.9.5 · fixed in 3.9.5
GHSA-g29v-q6h7-76wh · CVE-2026-45787 - CVSS 5.9 Medium
Multiple Vulnerabilities in IBM Concert Software.
- IBM Concert
- CWE-759
- CVSS 8.2 High
Vasion Print (formerly PrinterLogic) Insecure Password Hashing
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- Weak cryptography or TLS
- CWE-759
- CVSS 8.7 High
Predictable Salt and Weak Hashing Algorithm
- ABB FLXEON
- CWE-759
- CVSS 5.3 Medium
NeuVector has an insecure password storage and is vulnerable to rainbow attack
- Weak cryptography or TLS
- CWE-759
<0.0.0-20250825191744-da1a462074c3 · fixed in 0.0.0-20250825191744-da1a462074c3
GHSA-8ff6-pc43-jwv3 · CVE-2025-53884 - CVSS 4.8 Medium
Retrievable password hash protecting TSplus admin console
- TSplus Remote Access
- Hard-coded credentials
- CWE-759
- CVSS 4.8 Medium
Manifest Uses a One-Way Hash without a Salt
- CWE-759
<4.9.2 · fixed in 4.9.2
GHSA-h8h6-7752-g28c · CVE-2025-27408 - CVSS 4.4 Medium
IBM Security Verify Governance information disclosure
- IBM Security Verify Governance
- CWE-759
- CVSS 4.9 Medium
PLANET Technology switch devices - Weak hash for users' passwords
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Weak cryptography or TLS
- CWE-759
- CVSS 6.8 Medium
An issue was discovered on Swissphone DiCal-RED 4009 devices.
- Weak cryptography or TLS
- CWE-759
- CVSS 6.5 Medium
FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control
- techjewel FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
- CWE-759
- CVSS 6.5 Medium
B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
- B. Braun Melsungen AG SpaceCom
- B. Braun Melsungen AG Battery pack with Wi-Fi
- CWE-759
- CVSS 5.8 Medium
Use of a One-Way Hash without a Salt in OnlineVotingSystem
- dbijaya OnlineVotingSystem
- CWE-759
-
GE Digital APM Classic, Versions 4.4 and prior.
- GE Digital APM Classic
- CWE-759