CVE-2024-54549: Insecure Storage of Sensitive Information

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2025-24101: Insecure Storage of Sensitive Information

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data...

PT-2025-5285 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 Description: The issue is related to the insecure storage of confidential information in macOS, allowing an attacker to gain unauthorized access to protected data. An access issue was addressed with additional...

CVE-2024-55931: Insecure Storage of Sensitive Information

Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised. The patch for this vulnerability will be included in a future release of Workplace Suite, and customers will be notified through an update to the security bulletin...

CVE-2024-52328

The CVE-2024-52328 entry describes ECOVACS robot lawnmowers and vacuums that insecurely store audio files used to indicate that the camera is on. The underlying issue is insecure storage on the /data filesystem, which could allow an attacker with filesystem access to delete or modify the warning ...

ECOVACS robot lawnmowers and vacuums have security vulnerabilities

ECOVACS robot vacuums and ECOVACS robot lawnmowers are both products of the Chinese company ECOVACS.ECOVACS robot vacuums are a line of vacuum cleaners.ECOVACS robot lawnmowers are a line of lawnmowers. The ECOVACS robot lawnmowers and vacuums suffer from a security vulnerability that stems from...

CVE-2025-21299: Insecure Storage of Sensitive Information

Windows Kerberos Security Feature Bypass Vulnerability...

Oracle GraalVM Enterprise Edition Unauthorized Access

The vulnerability of the components of Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform lies in the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access...

CVE-2024-44292: Insecure Storage of Sensitive Information

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...

Dell PowerFlex Appliances Data Storage Data Compromise

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse are related to the insecure storage of confidential information. Exploiting these vulnerabilities c...

CVE-2024-44200: Insecure Storage of Sensitive Information

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be able to read sensitive location information...

CVE-2024-54485: Insecure Storage of Sensitive Information

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...

CVE-2024-54477: Insecure Storage of Sensitive Information

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access user-sensitive data...

CVE-2024-54504: Insecure Storage of Sensitive Information

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-37144

Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 for RCM 3.8.x train and prior to RCM 3.7.6.0 for RCM 3.7.x train, Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior...

CVE-2024-37144

Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 for RCM 3.8.x train and prior to RCM 3.7.6.0 for RCM 3.7.x train, Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior...

Dell PowerFlex security vulnerabilities

Dell PowerFlex is a commercial software-defined storage product from Dell USA. A security vulnerability exists in Dell PowerFlex that originates from insecure storage of sensitive information. An attacker with elevated privileges with local access could exploit this vulnerability to cause...

CVE-2024-37144: Insecure Storage of Sensitive Information

Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 for RCM 3.8.x train and prior to RCM 3.7.6.0 for RCM 3.7.x train, Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior...

CVE-2024-47043 Ruijie Reyee OS Insecure Storage of Sensitive Information

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

CVE-2024-47043: Insecure Storage of Sensitive Information

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...