https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:29:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-254109 EUVD-2026-254109 https://cve.radiocsirt.org/vuln/euvd-2026-254109 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2354 <p>Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.</p> <p>Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-2354 https://cve.radiocsirt.org/vuln/ghsa-xmw2-2pgj-jq4h <p>Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.</p> <p>Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.</p> https://cve.radiocsirt.org/vuln/ghsa-xmw2-2pgj-jq4h https://cve.radiocsirt.org/vuln/gsd-2014-2354 gsd-2014-2354 https://cve.radiocsirt.org/vuln/gsd-2014-2354 https://cve.radiocsirt.org/vuln/icsa-14-149-02 <p>Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Directory traversal vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to read arbitrary files of unspecified types, or cause a web-server denial of service, via a crafted pathname. Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.</p> <p>Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Directory traversal vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to read arbitrary files of unspecified types, or cause a web-server denial of service, via a crafted pathname. Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.</p> https://cve.radiocsirt.org/vuln/icsa-14-149-02