Threats Tagged 'cwe-328'
View all threats tagged with 'cwe-328'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-328'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-10540: CWE-328 Use of weak hash in BMC Control-M/Enterprise ManagerCVE-2026-10540 0 The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentially earlier unsupported versions Join the discussion | CVE Database V5 | 07/01/2026, 07:52:10 UTC Added: 07/01/2026, 08:06:46 UTC |
CVE-2026-53692: CWE-328 Use of Weak Hash in Redeight Redeight CMSCVE-2026-53692 0 Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials. Join the discussion | CVE Database V5 | 06/30/2026, 11:20:00 UTC Added: 06/30/2026, 11:51:57 UTC |
CVE-2026-48488: CWE-328: Use of Weak Hash in thorsten phpMyFAQCVE-2026-48488 0 phpMyFAQ versions prior to 4.1.4 use SHA-1, a cryptographically broken hash algorithm, for hashing attachment passwords. SHA-1 has been vulnerable to collision attacks since 2017. This weakness was addressed in version 4.1.4. Join the discussion | CVE Database V5 | 06/08/2026, 15:15:12 UTC Added: 06/08/2026, 15:49:01 UTC |
CVE-2026-8889: CWE-328 in Securly Securly Chrome ExtensionCVE-2026-8889 0 Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes). Join the discussion | CVE Database V5 | 06/03/2026, 18:15:15 UTC Added: 06/03/2026, 19:03:42 UTC |
Showing 1 to 4 of 4 results