Use of a One-Way Hash without a Salt

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization ControlCVE-2023-1430techjewel · CVSS 6.5 · 0.8% likely

   Techjewel

2. Use of a One-Way Hash without a Salt in OnlineVotingSystemCVE-2021-21253dbijaya · CVSS 5.8 · 0.7% likely
3. GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR…CVE-2020-16244Ge · 0.7% likely

   Ge

4. B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplusCVE-2020-25164B. Braun Melsungen AG · CVSS 6.5 · 0.6% likely

   B. Braun Melsungen AG

5. Vasion Print (formerly PrinterLogic) Insecure Password HashingCVE-2025-34208Vasion · CVSS 8.2 · 0.4% likely

   Vasion

6. Weak Credential Protection During TP-Link Omada Device AdoptionCVE-2025-15544TP-Link Systems Inc. · CVSS 6.9 · 0.3% likely

   TP-Link

7. PLANET Technology switch devices - Weak hash for users' passwordsCVE-2024-8453PLANET Technology · CVSS 4.9 · 0.3% likely

   Planet

8. Weak Credential Storage in TP-Link Omada DevicesCVE-2025-15631TP-Link Systems Inc. · CVSS 5.7 · 0.3% likely

   TP-Link

9. IBM Security Verify Governance information disclosureCVE-2023-33838IBM · CVSS 4.4 · 0.2% likely

   IBM

10. sfturing hosp_order User Password MD5.java MD5.getMD5 hash without saltCVE-2026-96552sfturing · CVSS 3.1 · 0.2% likely

    Sfturing

11. Multiple Vulnerabilities in IBM Concert Software.CVE-2025-36253IBM · CVSS 5.9 · 0.2% likely

    IBM

12. Predictable Salt and Weak Hashing AlgorithmCVE-2025-10205ABB · CVSS 8.8 · 0.2% likely

    ABB

13. IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto componentCVE-2025-36271IBM · CVSS 5.9 · 0.2% likely

    IBM

14. CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashesCVE-2026-13576CallBackery · CVSS 7.5 · 0.2% likely
15. Information Disclosure in Pik Online Software's PortalCVE-2026-6217Pik Online Software Solutions Inc. · CVSS 6.3 · 0.2% likely
16. NeuVector has an insecure password storage vulnerable to rainbow attackCVE-2025-53884SUSE · CVSS 5.3 · 0.2% likely

    SUSE

17. WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phpCVE-2026-45027LabRedesCefetRJ · CVSS 5.9 · 0.2% likely

    LabRedesCefetRJ

18. Manifest Uses a One-Way Hash without a SaltCVE-2025-27408mnfst · CVSS 4.8 · 0.2% likely
19. A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 has…CVE-2026-57263Siemens · CVSS 6.8 · 0.1% likely

    Siemens

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.