Invocation of Process Using Visible Sensitive Information

Every one of the 40 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attack…CVE-2021-3859Redhat · 1.8% likely

   Red Hat

2. When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability t…CVE-2019-3869Red Hat · CVSS 7.2 · 1.3% likely

   Red Hat

3. UAA password may appear in BOSH System Metrics Server process argumentsCVE-2020-5422Cloud Foundry · 0.9% likely

   Cloud Foundry

4. A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7,…CVE-2020-1753Red Hat · CVSS 5 · 0.5% likely

   Red Hat

5. CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via…CVE-2020-36771Cloudlinux OS · CVSS 7.8 · 0.5% likely
6. Secrets Exfiltration in gradio-app/gradioCVE-2024-4254gradio-app · CVSS 7.1 · 0.5% likely

   Gradio-App

7. CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecatedCVE-2021-32638github · CVSS 4.4 · 0.4% likely

   GitHub

8. yast2-rmt leaks database passwords in process listCVE-2018-17957SUSE · CVSS 3.4 · 0.4% likely

   SUSE

9. Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a paramet…CVE-2018-16837Redhat · CVSS 7.8 · 0.4% likely

   Red Hat

10. openssl_encrypt before 1.4.0 Password Exposure via CLI ArgumentCVE-2026-74873jahlives · CVSS 5.5 · 0.3% likely

    Jahlives

11. A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the mali…CVE-2025-5452Axis Communications AB · CVSS 6.6 · 0.3% likely

    Axis Communications AB

12. IBM QRadar Suite Software information disclosureCVE-2024-28799IBM · CVSS 5.6 · 0.3% likely

    IBM

13. Infinispan-operator: infinispan operator: sensitive information disclosure due pod args storeCVE-2026-92171Red Hat · CVSS 6.5 · 0.3% likely

    Red Hat

14. IBM MQ Operator information disclosureCVE-2025-1333IBM · CVSS 6 · 0.3% likely

    IBM

15. Information disclosure in mk_oracle Checkmk agent pluginCVE-2024-1742Checkmk GmbH · CVSS 3.8 · 0.2% likely

    Checkmk GmbH

16. pgAdmin 4: Server passwords are left in pgAdmin's process environmentCVE-2026-116246pgadmin.org · CVSS 6.5 · 0.2% likely

    Pgadmin.org

17. toy-blog administrative token leaked through the command line parameterCVE-2024-39314KisaragiEffective · CVSS 4.7 · 0.2% likely
18. PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess ExecutionCVE-2026-40159MervinPraison · CVSS 5.5 · 0.2% likely

    MervinPraison

19. Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's buil…CVE-2026-76054Black Duck · CVSS 7.1 · 0.2% likely

    Black Duck

20. Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher.CVE-2025-32987Arctera · CVSS 6 · 0.2% likely
21. NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might…CVE-2026-65088NVIDIA · CVSS 5.5 · 0.2% likely

    NVIDIA

22. Cockpit-machines: cockpit-machines: sensitive data exposure via command-line argumentsCVE-2026-92768Red Hat · CVSS 5.5 · 0.2% likely

    Red Hat

23. Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process listCVE-2026-92747Red Hat · CVSS 5 · 0.2% likely

    Red Hat

24. openssl_encrypt before 1.4.9 Information Disclosure via Command LineCVE-2026-81684jahlives · CVSS 6.2 · 0.2% likely

    Jahlives

25. microsandbox: Secret values exposed in world-readable process argumentsCVE-2026-61670superradcompany · CVSS 6.5 · 0.2% likely
26. Tanium addressed an information disclosure vulnerability in Connect.CVE-2026-12139Tanium · CVSS 4.4 · 0.2% likely

    Tanium

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.