CWE-916
147 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 147Published CVEs147 of them scored
- 43Last 12 monthspublished in the last year
- 17Critical56 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-19126
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium5.9 - CVE-2026-118991
CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key
CallBackery
High7.5 - CVE-2026-13576
CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes
CallBackery
High7.5 - CVE-2026-65629
Weak PBKDF2 parameters for password-encrypted private-key export in jose
potatosalad · jose
High7.4 - CVE-2026-116054
SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash
SH3
Low2.1 - CVE-2026-116071
rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption
rotki · rotki
High8.2 - CVE-2025-30049
Use of Unsalted MD5 Password Hashes in CGM CLININET
CGM · CGM CLININET
High8.2 - CVE-2026-112029
diem-project diem SHA1 PluginDmUser.class.php weak password hash
diem-project · diem
Low2.0 - CVE-2026-112026
light0011 cms UserModel.class.php sha1 weak password hash
light0011 · cms
Medium6.3 - CVE-2026-111330
JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1
juggleim · JuggleIM
High8.2