Advisories · Weakness
CWE-760.
Every Advisory and CVE whose sources give the weakness CWE-760, newest first.
- CVSS 7.7 High
CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID
- PAICNI CFNext
- CWE-760
- CVSS 1.8 Low
Reversible IP address pseudonymisation in AshAuthentication audit log hash mode
- CWE-760
>=4.12.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14
GHSA-cgqj-pcpq-xhfm · CVE-2026-82759 - CVSS 5.0 Medium
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
- Siemens SINEC INS
- CWE-760
- CVSS 6.3 Medium
jasypt-spring-boot Uses a One-Way Hash without a Salt
- CWE-759
- CWE-760
>=3.0.0, <=4.0.4 · no fixed version yet
GHSA-jgj7-c8vj-w563 · CVE-2026-9370 - CVSS 6.0 Medium
Authentication Weakness on Omada Controllers, Gateways and Access Points
- TP-Link Systems Inc. Omada Software Controller
- TP-Link Systems Inc. Omada Cloud Controller
- CWE-760
- CVSS 6.1 Medium
One way hash with predictable salt
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-760
- CVSS 6.0 Medium
Broken or risky cryptographic algorithm in Beta80 Life 1st
- Beta80 Life 1st
- Weak cryptography or TLS
- CWE-760
- CVSS 7.5 High
An issue in Horizon Business Services Inc.
- CWE-760
- CVSS 7.0 High
InHand Networks InRouter 302: InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615…
- InHand Networks InRouter 302
- InHand Networks InRouter 615
- CWE-760
- CVSS 5.3 Medium
Gutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information Disclosure
- Redux.io Gutenberg Template Library & Redux Framework
- Information disclosure
- CWE-760
- CVSS 9.8 CriticalCritical · CVSS 9+
Modicon M221 (all references, all versions): A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon…
- Modicon M221 (all references, all versions)
- CWE-760
- CVSS 2.9 Low
DocuTrac DTISQLInstaller.exe Hard-Coded Salt
- DocuTrac DTISQLInstaller.exe
- CWE-760