Xerox Workplace Suite Print Management Server Information Disclosure

The vulnerability of the Xerox Workplace Suite print management server is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-0714 Insecure storage of sensitive information in MobaXTerm <25.0.

The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector IV consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, on opening MobaXTerm, the user is prompted...

WordPress plugin JS Help Desk has a vulnerability related to information leakage.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. An information disclosure vulnerabili...

Messages Component MacOS Unauthorized Access

The vulnerability of the Messages component in the MacOS operating system is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Security Component MacOS Unauthorized Access

The vulnerability of the Security component of the MacOS operating system is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

WordPress plugin Majestic Support has a vulnerability related to information leakage.

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

macOS Information Disclosure

The vulnerability of macOS operating systems lies in the insecure storage of confidential information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

macOS Information Disclosure

The vulnerability of macOS operating systems lies in the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

FaceTime macOS Disclosure

The vulnerability of the FaceTime video/audio call technology in macOS operating systems lies in the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker to disclose protected information...

macOS Information Disclosure

The vulnerability of Spotlight search engine in macOS operating systems is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2022-1044

Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1...

CVE-2022-1021

Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...

CVE-2022-0881

Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1...

CVE-2022-44619

Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39776

Avtec Outpost stores sensitive information in an insecure location without proper access controls in place...

CVE-2025-20886: Insecure Storage of Sensitive Information

Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key...

CVE-2025-0498: Insufficiently Protected Credentials

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user...

CVE-2024-57436: Insecure Storage of Sensitive Information

RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can allow attackers to impersonate Admin users via using a crafted cookie...

PT-2025-5281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 Description: The issue is related to insecure storage of confidential information in the MacOs operating system's Security component. It may allow an...

CVE-2024-54541: Insecure Storage of Sensitive Information

This issue was addressed through improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An app may be able to access user-sensitive data...