2394 matches found
CVE-2024-24488
CVE-2024-24488 An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component. Tested Versions CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: Cleartext Storage in a File or on Disk Vulnerability Overview Devices...
CVE-2023-5359
CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Description CVE-2023-5359 is a cleartext storage vulnerability affecting the WordPress plugin W3 Total Cache in versions ≤ 2.7.5. This vulnerability allows remote attackers to access sensitive credentials stored in unencrypted PHP fil...
CVE-2025-65320
CVE-2025-65320 CVE-2025-65320: Cleartext Storage of Sensitive Information in Memory in Abacre Restaurant Point of Sale POS. All versions of Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid...
Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache
Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache Targets versions ≤2.7.5 vulnerable to CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...
EUVD-2026-125452
A flaw in the automatic client-side encryption schema generation of the Mongoid ODM may cause values that an application declared for encryption to be written and stored as cleartext when more than one model is mapped onto the same storage location. No error or warning is raised. A party holding ...
CVE-2023-39144
CVE-2023-39144 Background I discovered this vulnerability in May of 2023. Element55 produces software for law offices to track time. This software pulls information from various locations, such as Exchange, SQL, and Shoretel. Timeline May 24, 2023 - Reported vulnerability to Element 55 May 25, 20...
CVE-2026-116431
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-116431
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
EUVD-2026-125144
Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-116431
Dell PowerScale InsightIQ , versions 6.3.0 through 6.4.0 , contains a Cleartext Storage of Sensitive Information vulnerability (CWE-312). A low privileged attacker with remote access could potentially exploit this flaw to cause Information disclosure . Remediation information is available via the...
PT-2026-146944
A flaw in the automatic client-side encryption schema generation of the Mongoid ODM may cause values that an application declared for encryption to be written and stored as cleartext when more than one model is mapped onto the same storage location. No error or warning is raised. A party holding ...
CVE-2018-16987
CVE-2018-16987 This is a cleartext storage of sensitive information & sensitive information exposure vulnerability I found in Squash TM during a penetration test. SquashTM Squash TM is a web interface used to manage test cases. Link to the project Description Squash TM through at least 1.18.0...
CVE-2026-126643
A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret Secret/-resource-server, key controllerresourceserversecret and copies its plaintext value into the generated AutomationController cust...
EUVD-2026-124342
A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret Secret/-resource-server, key controllerresourceserversecret and copies its plaintext value into the generated AutomationController cust...
CVE-2026-105813
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token...
CVE-2026-105813
Ivanti User Workspace Manager (UWM) is vulnerable to cleartext storage of sensitive information (CWE-312) in versions 2026.2 and prior . This flaw allows a local authenticated attacker to retrieve another local user's session token . To remediate this vulnerability, users should update to version...
CVE-2026-105813
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token...
EUVD-2026-121246
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token...
Security Advisory Ivanti User Workspace Manager (CVE-2026-105813)
Summary Ivanti has released an update for Ivanti User Workspace Manager UWM which addresses one medium severity vulnerability. This issue only affects UWM Neurons Hybrid environments and does not affect UWM on-premise or Ivanti Neurons for App Control. We are not aware of any customers being...