CWE-916

CVEs per yearBy the year they were published

1. 20081
2. 20141
3. 20171
4. 20188
5. 201911
6. 20209
7. 202120
8. 202213
9. 202314
10. 202411
11. 202514
12. 202639

Newest CVEs

• CVE-2026-118991

  CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key

  CallBackery

  Not scored
• CVE-2026-13576

  CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes

  CallBackery

  Not scored
• CVE-2026-65629

  Weak PBKDF2 parameters for password-encrypted private-key export in jose

  potatosalad · jose

  High7.4
• CVE-2026-116054

  SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash

  SH3

  Low2.1
• CVE-2026-116071

  rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption

  rotki · rotki

  High8.2
• CVE-2025-30049

  Use of Unsalted MD5 Password Hashes in CGM CLININET

  CGM · CGM CLININET

  High8.2
• CVE-2026-112029

  diem-project diem SHA1 PluginDmUser.class.php weak password hash

  diem-project · diem

  Low2.0
• CVE-2026-112026

  light0011 cms UserModel.class.php sha1 weak password hash

  light0011 · cms

  Medium6.3
• CVE-2026-111330

  JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1

  juggleim · JuggleIM

  High8.2
• CVE-2026-110104

  novel through 3.5.0 Unsalted MD5 Password Storage

  xxyopen · novel

  High8.2

Vendors it comes up for most

1. Fortinet4
2. IBM3
3. jahlives3
4. FrontAccounting2
5. Siemens AG2
6. WREIS2
7. rustdesk-client2
8. AMI1
9. ARODLAND1
10. BUFFALO INC.1