CVE-2026-106022

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-106022

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

EUVD-2026-118265

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-106022

Johnson Controls EasyIO Neo IOManager and Tools Installer (version 1.1.0.0 ) are affected by a vulnerability involving the cleartext storage of sensitive information in memory . This flaw allows an attacker to Retrieve Embedded Sensitive Data . The vulnerability is associated with CWE-316 . No sp...

CVE-2026-106022: Johnson Controls EasyIO Neo IOManager and Tools Installer: Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools…

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-114551

The MailEnable software is susceptible to an information disclosure vulnerability due to the cleartext storage of sensitive information during the handling of mailbox credentials. Remote attackers can exploit this flaw without any authentication to disclose sensitive data. This vulnerability coul...

CVE-2026-114551 MailEnable Auth Cleartext Storage Information Disclosure Vulnerability

MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling ...

CVE-2026-120733

Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrato...

CVE-2026-120733

Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrato...

EUVD-2026-116489

Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrato...

CVE-2026-120733

The vulnerability exists in Devolutions Server 2026.3.12.0 and earlier due to the cleartext storage of sensitive information within user account data. Specifically, the application writes an unencrypted copy of the security key when an administrator saves a user. An attacker who gains read access...

CVE-2023-5359

CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Description CVE-2023-5359 is a cleartext storage vulnerability affecting the WordPress plugin W3 Total Cache in versions ≤ 2.7.5. This vulnerability allows remote attackers to access sensitive credentials stored in unencrypted PHP fil...

CVE-2018-16987

CVE-2018-16987 This is a cleartext storage of sensitive information & sensitive information exposure vulnerability I found in Squash TM during a penetration test. SquashTM Squash TM is a web interface used to manage test cases. Link to the project Description Squash TM through at least 1.18.0...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Cleartext Storage of Sensitive Information in Memory in Abacre Restaurant Point of Sale POS. All versions of Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid...

CVE-2024-24488

CVE-2024-24488 An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component. Tested Versions CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: Cleartext Storage in a File or on Disk Vulnerability Overview Devices...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache Targets versions ≤2.7.5 vulnerable to CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...

CVE-2023-39144

CVE-2023-39144 Background I discovered this vulnerability in May of 2023. Element55 produces software for law offices to track time. This software pulls information from various locations, such as Exchange, SQL, and Shoretel. Timeline May 24, 2023 - Reported vulnerability to Element 55 May 25, 20...

CVE-2026-110200

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information...

CVE-2026-110200

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information...

CVE-2026-110200

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information...