Vulnerabilities (CVE)

Filtered by CWE-640
Total 282 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-5618 1 Ushahidi 1 Ushahidi 2026-06-16 5.0 MEDIUM 9.8 CRITICAL
Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.
CVE-2009-5025 1 Pyforum Project 1 Pyforum 2026-06-16 5.0 MEDIUM 7.5 HIGH
A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user.