Cleartext Storage in a File or on Disk

Every one of the 32 is a mark on the map. Named now: 1 to 26, most at risk first.

1. TrackR Bravo mobile application stores account passwords in cleartextCVE-2016-6538TrackR · 1.0% likely
2. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR V…CVE-2019-19291Siemens · CVSS 5.3 · 0.7% likely

   Siemens

3. Zizai Tech Nut stores the account password in cleartextCVE-2016-6547Zizai Technology · 0.4% likely
4. iTrack Easy mobile application stores the user password in base-64 encoding/cleartextCVE-2016-6546iTrack · 0.4% likely

   iTrack

5. Medtronic MyCareLink Patient Monitor Network Credential WeaknessCVE-2018-10622Medtronic · CVSS 5.2 · 0.4% likely

   Medtronic

6. PHPGurukul Blood Donor Management System Login_Model.php cleartext storage in fileCVE-2026-90842PHPGurukul · CVSS 3.7 · 0.3% likely

   PHPGurukul

7. Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on diskCVE-2025-2120Thinkware · CVSS 2.1 · 0.3% likely

   Thinkware

8. PAN-OS: Cleartext Exposure of External System SecretsCVE-2024-5916Palo Alto Networks · CVSS 6 · 0.2% likely

   Palo Alto Networks

9. Simple Design Daily Journal SQLite Database cleartext storage in a file or on diskCVE-2023-2863Simple Design · CVSS 2.3 · 0.2% likely
10. SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in fileCVE-2026-5531SourceCodester · CVSS 5.3 · 0.2% likely

    SourceCodester

11. ZZCMS User Data Storage user_save.php cleartext storage in fileCVE-2025-14836Zzcms · CVSS 2.7 · 0.2% likely

    Zzcms

12. Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.CVE-2023-35699SICK AG · CVSS 5.3 · 0.2% likely

    SICK AG

13. OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data ExposureCVE-2026-52783opf · CVSS 8.2 · 0.2% likely

    Opf

14. PhonePe App SQLite Database databases cleartext storage in fileCVE-2025-5154Phonepe · CVSS 2.3 · 0.2% likely

    Phonepe

15. Operator: passwords defined in secrets shown in statefulset yamlCVE-2023-4066Red Hat · CVSS 5.5 · 0.2% likely

    Red Hat

16. code-projects Blood Bank Management System Password cleartext storage in a file or on diskCVE-2024-9040code-projects · CVSS 2.3 · 0.2% likely

    Code-Projects

17. langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in fileCVE-2026-6598langflow-ai · CVSS 4.3 · 0.2% likely

    Langflow-Ai

18. Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)CVE-2024-38280Motorola Solutions · CVSS 7 · 0.2% likely

    Motorola Solutions

19. Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in fileCVE-2026-6796Sanluan · CVSS 4.3 · 0.1% likely

    Sanluan

20. Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on diskCVE-2023-0114Netis · CVSS 3.3 · 0.1% likely

    Netis-Systems

21. Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabledCVE-2024-49762pterodactyl · CVSS 4.6 · 0.1% likely

    Pterodactyl

22. Columbia Weather Systems MicroServer Cleartext Storage in a File or on DiskCVE-2025-64305Columbia Weather Systems · CVSS 6.5 · 0.1% likely

    Columbiaweather

23. Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentialsCVE-2024-30406Juniper Networks · CVSS 5.5 · 0.1% likely

    Juniper Networks

24. Medtronic MyCareLink Patient Monitor Data Encryption WeaknessCVE-2025-4397Medtronic · CVSS 6.8 · 0.1% likely

    Medtronic

25. Bharti Airtel Thanks App files cleartext storage in a file or on diskCVE-2025-6748Bharti Airtel · CVSS 2.1 · 0.1% likely
26. Cisco Nexus Dashboard Fabric Controller Credential Information Disclosure VulnerabilityCVE-2024-20448Cisco · CVSS 6.3 · 0.1% likely

    Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.