Cleartext Storage of Sensitive Information in a Cookie

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Cleartext Storage of Sensitive Information in CookiesCVE-2018-19941QNAP Systems Inc. · 0.7% likely

   QNAP

2. FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.CVE-2024-41290Flatpress · CVSS 8.1 · 0.4% likely

   Flatpress

3. Exrick xboot getMenuList sensitive information in a cookieCVE-2025-8528Exrick · CVSS 3.7 · 0.4% likely

   Exrick

4. yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookieCVE-2025-4537yangzongzhuan · CVSS 3.1 · 0.3% likely

   Yangzongzhuan

5. 1Panel set-cookie is missing the Secure keywordCVE-2024-247681Panel-dev · CVSS 6.5 · 0.3% likely

   1Panel-dev

6. Cleartext Storage of Sensitive Information in Oceanic Software's ValeAppCVE-2024-8644Oceanic Software · CVSS 9.3 · 0.3% likely

   Oceanic Software

7. HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cook…CVE-2026-25818CVSS 9.1 · 0.2% likely
8. In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookieCVE-2021-34564Phoenix Contact · CVSS 5.5 · 0.2% likely

   Phoenix Contact

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.