Skip to content
BackEsc
Sign in

CWE-312 · weakness in Cryptography

Cleartext Storage of Sensitive Information

771 CVEs · 2 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
2
check available
4
likely to be exploited
7

Every one of the 771 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns…CVE-2023-22894Strapi · CVSS 7.2 · 4.1% likelycovered by CyberSIXT

    StrapiFlax Typhoon4 articles

  2. The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.CVE-2011-4723D-Link · CVSS 5.7 · 3.1% likely

    D-Link

  3. Grafana & Zabbix Integration - Credentials DisclosureCVE-2022-2614853% likely
  4. Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password DisclosureCVE-2021-289374.2% likely
  5. WatchGuard Fireware AD Helper Component - Credentials DisclosureCVE-2020-105322.8% likely
  6. Electrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials DisclosureCVE-2024-3742Electrolink · CVSS 7.5 · 1.4% likely

    Electrolink

  7. An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs.CVE-2021-2714019% likely
  8. An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin…CVE-2020-2457719% likely
  9. An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions.CVE-2021-2717619% likely
  10. An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions.CVE-2021-2717419% likely
  11. An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram.CVE-2021-2717818% likely
  12. An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions.CVE-2021-2717518% likely
  13. rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restricti…CVE-2018-894711% likely
  14. Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information.CVE-2013-26808.7% likely
  15. The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by…CVE-2019-0285SAP SE · 6.6% likely

    SAP

  16. The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated p…CVE-2020-5723Grandstream UCM6200 series · 5.9% likely
  17. Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro ca…CVE-2016-8366Phoenix Contact · 5.7% likely

    Phoenix Contact

  18. Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io objectCVE-2021-36782SUSE · CVSS 9.9 · 4.2% likely

    SUSE

  19. An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive informati…CVE-2018-112423.9% likely
  20. KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trig…CVE-2023-24055Keepass · 3.8% likely
  21. An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.CVE-2023-31069Tsplus · 3.7% likely

    TSplus

  22. A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via…CVE-2025-27532Bosch Rexroth AG · CVSS 6.5 · 3.6% likely

    Bosch Rexroth AG

  23. mySCADA myPRO Manager Cleartext Storage of Sensitive InformationCVE-2025-22896mySCADA · CVSS 8.6 · 3.6% likely

    mySCADA

  24. Plaintext Passwords Vulnerability in BLUVOYIXCVE-2026-22240Bluspark Global · CVSS 10 · 3.4% likely

    Bluspark Global

  25. Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to ga…CVE-2001-14813.2% likely
  26. SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sensitive information.CVE-2008-61573.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in