Browse and filter security vulnerabilities across ecosystems
Browse and filter security vulnerabilities across ecosystems
OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects
Setracker2 Children's Smartwatch Ecosystem Use of password hash instead of password for authentication
Vikunja's Scoped API tokens with projects.background permission can delete project backgrounds
CEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field
A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, Forti...
ELOG file upload stored XSS
Login to the application services using only the password hash
The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the au...
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerS...
Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 11201...
Improper session handling of "Remember me for 7 days" functionality
An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364
Login with hash
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX...