CWE-540 · weakness in Information Disclosure
Inclusion of Sensitive Information in Source Code
36 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.
- Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability
- keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code
- Sangfor Next-Gen Application Firewall Source Code Disclosure
- Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attac…
- Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
- 云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in source
- ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability
- QNAP AI Core
- keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source code
- Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
- Credential disclosure
- A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker t…
- Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated att…
- WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page
- An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.
- IBM Datacap Navigator information disclosure
- Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source
- Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit Software
- Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
- PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
- IBM Analytics Content Hub information disclosure
- Inclusion of Sensitive Information in Source Code in GitLab
- IBM Maximo Application Suite information disclosure
- IBM OpenPages information disclosure
- IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- IBM Cognos Analytics information disclosure
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.