910 matches found
CVE-2025-41458
CVE-2025-41458 concerns unencrypted storage in the iOS app Two App Studio Journey v5.5.9, allowing local attackers with direct filesystem access to extract sensitive data. The NVD entry lists a CVSS v3.1 base score 5.5 (MEDIUM) , with LOCAL attack vector, LOW attack complexity, and HIGH confident...
CVE-2024-49784
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values...
CVE-2025-48819
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
WISE-4010LAN Ethernet Module Unencrypted Storage
The vulnerability of the microprogrammed Ethernet module software WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...
CVE-2024-49783
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data, they could exploit this vulnerability t...
CVE-2025-48819
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2025-48819
Technical details about CVE-2025-48819 are not publicly provided in the supplied documents; no product/version/root-cause/impact information is included beyond the basic description. Monitor for official updates.
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2025-21003
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-48819: Sensitive Data Storage in Improperly Locked Memory
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
PT-2025-28550 · Microsoft · Windows Universal Plug/Play (Upnp) Device Host +1
Name of the Vulnerable Software and Affected Versions: Windows Universal Plug and Play UPnP Device Host affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an authorized attacker to elevate privileges over an adjacent networ...
LB-LINK BL-W1210M Unencrypted Storage
The vulnerability of the microprogrammed software of the LB-LINK BL-W1210M router lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the protected information...
CVE-2025-45784
D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVISUSERPASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially...
How Waymo Handles Footage From Events Like the LA Immigration Protests
Waymo driverless taxis capture troves of video footage in order to operate, but the company reveals very little about how much data is stored—and for how long...
SAP Financial Consolidation Data Compromise
The vulnerability of the SAP Financial Consolidation web application relates to the storage of confidential information within a mechanism without access control. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibili...
CVE-2025-4053
The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the...
PT-2025-23113
Name of the Vulnerable Software and Affected Versions TeleMessage service through 2025-05-05 Description The issue concerns the storage of certain cleartext information in memory by the TeleMessage service. This information may be accessible to an adversary through various means. There have been...
Be-Tech Mifare Classic cards security vulnerabilities
Be-Tech Mifare Classic cards are a line of electronic cards from Be-Tech. A security vulnerability exists in Be-Tech Mifare Classic cards that stems from the explicit storage of data, which could lead to the creation of master key cards...
CVE-2024-1779
The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ztdcfcfchangestatus function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to alter t...