CWE-521: Weak Password Requirements
The product does not require that users should have strong passwords.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- laborofficefreeWeak MySQL database root password in LaborOfficeFree6.8 Medium
- ibm security access manager container, security verify access appliance, security verify access docker +2 moreIBM Security Access Manager Container information disclosure6.2 Medium
- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Container unauthorized access7.3 High
- lamassu bitcoin atm douro machines, douro firmware, douro ii firmware +2 moreWeak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines5.6 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal signup_teacher.php weak password3.7 Low
- gradle enterpriseIn Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new...9.8 Critical
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal change_password_teacher.php weak password3.1 Low
- phpgurukul online notes sharing systemPHPGurukul Online Notes Sharing System signup.php weak password3.1 Low
- connectize ac21000 g6 firmwareAn issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain...9.8 Critical
- pfsenseAn issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via...9.8 Critical
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements8.8 High
- hcl software compass, hcltech hcl compass +1 moreA weak password requirements vulnerability affects HCL Compass8.1 High
- i-doitI-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for...9.8 Critical
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreWeak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server8.6 High
- answer, answerdev answerdev/answer +1 moreWeak Password Requirements in answerdev/answer8.8 High
- f5 big-ip, big-ip 10200v-f firmware, big-ip 10350v-f firmware +28 more +30 moreBIG-IP FIPS HSM password vulnerability CVE-2023-34706.0 Medium
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Weak Password Requirements7.5 High
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips mode7.0 High
- cloudexplorer-dev cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreWeak passwords allowed in cloudexplorer-lite6.5 Medium
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreWeak Password Requirements in cloudexplorer-dev/cloudexplorer-lite6.5 Medium
- mitsubishi electric corporation melsec iq-f series ethernet/ip module fx5-enet/ip, melsec iq-r series ethernet/ip module rj71eip91, mitsubishielectric fx5-enet\/ip firmware +3 more +5 moreAuthentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules7.5 High
- apache inlongApache InLong: Weak Password Implementation in InLong9.8 Critical
- seiko-sol skybridge basic mb-a130 firmware, skybridge mb-a200 firmware, skyspider mb-r210 firmware +1 more +3 moreUse of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow...7.5 High
- seiko solutions inc. skybridge mb-a100/110, seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +2 moreUse of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which...7.5 High
- enterprisedb postgres advanced serverEnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in...7.5 High
- modoboa, modoboa modoboa/modoboa +1 moreWeak Password Requirements in modoboa/modoboa6.3 Medium
- electra central ac unit, electra-air central ac unit firmware +1 moreElectra Central AC unit – Easily calculated password7.5 High
- janeczku calibre-web, janeczku/calibre-web +1 moreWeak Password Requirements in janeczku/calibre-web7.3 High
- ibm sterling order managementIBM Sterling Order Management information disclosure5.9 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq5.5 Medium
- megafeis bofei dbd\+An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker...7.5 High
- samourai-wallet-android project samourai-wallet-androidAn issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0...5.5 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq7.1 High
- employee leaves management system project leaves management system, phpgurukul employee leaves management system +1 morePHPGurukul Employee Leaves Management System changepassword.php weak password3.7 Low
- schneider electric c-bus network automation controller, lss5500nac, clipsal c-bus network automation controller, 5500nac, clipsal wiser for c-bus automation controller, 5500shac +9 more +11 moreA CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain...9.8 Critical
- publify publify/publify, publify project publify +1 moreWeak Password Requirements in publify/publify8.1 High
- froxlor, froxlor froxlor/froxlor +1 moreWeak Password Requirements in froxlor/froxlor5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq5.7 Medium
- kiwitcms kiwi, kiwi tcms +1 moreWeak password requirements in Kiwi TCMS6.5 Medium
- zed-3 voip simplicity asgBeijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) has a Weak...9.8 Critical
- zkteco zktimeA default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0...7.5 High
- lazy mouse project mouse, thisaay lazy mouse +1 moreLazy Mouse server enforces weak password requirements and doesn't implement rate limiting,...9.8 Critical
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server has no password length limit when creating a user as an administrator2.4 Low
- siyucmsSiyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the...7.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq7.5 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreWeak Password Requirements in ikus060/rdiffweb3.5 Low
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreWeak Password Requirements in ikus060/rdiffweb5.4 Medium
- ikus-soft minarca, ikus060 ikus060/minarca +1 moreWeak Password Requirements in ikus060/minarca9.8 Critical
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreWeak Password Requirements in ikus060/rdiffweb7.1 High
- ontrack project ontrackInoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain...9.8 Critical
- Show moreLoading…