CWE-916 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-916 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-85497CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password has…0.3%심각9.3CVE-2026-110104Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to …0.3%높음8.2CVE-2026-86670A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the…0.3%낮음2.9CVE-2026-94206Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_e…0.3%보통6.3CVE-2026-111330JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin c…0.2%높음8.2CVE-2026-116054A security vulnerability has been detected in SH3. This affects an unknown function of the component…0.2%낮음1.2CVE-2025-30049The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in v…0.2%높음8.2CVE-2026-62376Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store passwo…0.2%높음8.1
전체 목록
19건
CVE-2026-116071rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups …0.2%높음8.2
CVE-2026-112026A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f6…0.2%낮음2.9
CVE-2026-107829Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted …0.2%높음8.2
CVE-2026-92921admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key…0.2%보통6.9
CVE-2026-105156A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/func…0.2%낮음2.9
CVE-2026-13576CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are h…0.1%미평가
CVE-2026-118991CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES …0.1%미평가
CVE-2026-90457The administrative password is hashed using a comparatively weak, fast algorithm for the credential store back…0.1%보통6.9
CVE-2026-105804Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.…0.1%보통5.7
CVE-2026-112029A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/…0.1%낮음1.1
CVE-2026-65629Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains…0.1%높음7.4
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.