CWE-256 · Authentication
Plaintext Storage of a Password
228CVEs
SortMost likely exploited
228 CVEs with CWE-256 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-28736An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page function.No vendor recorded · CVSS 7.1 · 2024-05-31 | 7.1 | 2.5% | 2024-05-31 |
| CVE-2019-10921A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with acces…Siemens · LOGO! 8 BM (incl. SIPLUS variants) · 2019-05-14 | – | 2.4% | 2019-05-14 |
| CVE-2017-16714In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication.Ice Qube · Thermal Management Center · 2018-09-06 | – | 2.3% | 2018-09-06 |
| CVE-2024-26165Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft · Visual Studio Code · CVSS 8.8 · 2024-03-12 | 8.8 | 1.9% | 2024-03-12 |
| CVE-2020-8183A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.Nextcloud · Nextcloud Server · 2020-10-30 | – | 1.9% | 2020-10-30 |
| CVE-2020-6961In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Ve…Gehealthcare · GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Statio… · 2020-01-24 | – | 1.6% | 2020-01-24 |
| CVE-2020-10609Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the de…Grundfos · CIM 500 · 2020-07-27 | – | 1.5% | 2020-07-27 |
| CVE-2018-7510In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that…ICS-CERT · BeaconMedaes TotalAlert Scroll Medical Air Systems web application · 2018-06-06 | – | 1.4% | 2018-06-06 |
| CVE-2018-8851Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaint…Echelon · SmartServer 1 · CVSS 9.8 · 2018-07-24 | 9.8 | 1.3% | 2018-07-24 |
| CVE-2024-29978User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected prod…Sharp Corporation · Multiple MFPs (multifunction printers) · CVSS 5.9 · 2024-11-26 | 5.9 | 1.3% | 2024-11-26 |
| CVE-2017-6049Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL.Detcon · Sitewatch Gateway · 2019-04-02 | – | 1.3% | 2019-04-02 |
| CVE-2019-6518Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.ICS-CERT · Moxa IKS, EDS · 2019-03-05 | – | 1.2% | 2019-03-05 |
| CVE-2017-7913A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 an…Moxa · Moxa OnCell · 2017-05-29 | – | 1.2% | 2017-05-29 |
| CVE-2023-0457Information Disclosure Vulnerability in MELSEC SeriesMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES · CVSS 7.5 · 2023-03-03 | 7.5 | 1.2% | 2023-03-03 |
| CVE-2020-5374Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote una…Dell · OMIMSSC (OpenManage Integration for Microsoft System Center) · CVSS 8.8 · 2020-07-14 | 8.8 | 1.0% | 2020-07-14 |
| CVE-2021-32978Automation Direct CLICK PLC CPU Modules Plaintext Storage of a PasswordAutomation Direct · CLICK PLC CPU Modules: C0-1x CPUs · CVSS 7.5 · 2022-04-04 | 7.5 | 1.0% | 2022-04-04 |
| CVE-2021-1589Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure VulnerabilityCisco · Cisco SD-WAN vManage · CVSS 6.5 · 2021-09-23 | 6.5 | 1.0% | 2021-09-23 |
| CVE-2020-26079Cisco IoT Field Network Director Unprotected Storage of Credentials VulnerabilityCisco · Cisco IoT Field Network Director (IoT-FND) · CVSS 4.1 · 2020-11-18 | 4.1 | 1.0% | 2020-11-18 |
| CVE-2025-27656Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Password Stored in Process List V-2023-011.Printerlogic · Vasion Print · CVSS 9.8 · 2025-03-05 | 9.8 | 0.9% | 2025-03-05 |
| CVE-2024-43659Plaintext default credentials in firmwareIocharger · Iocharger firmware for AC models · CVSS 7.2 · 2025-01-09 | 7.2 | 0.8% | 2025-01-09 |
| CVE-2022-3287When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on…Fwupd · fwupd · CVSS 6.5 · 2022-09-28 | 6.5 | 0.8% | 2022-09-28 |
| CVE-2022-22458IBM Security Verify Governance, Identity Manager information disclosureIBM · Security Verify Governance, Identity Manager · CVSS 6.3 · 2022-12-22 | 6.3 | 0.8% | 2022-12-22 |
| CVE-2022-36308Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the file…Airspan · AirVelocity · 2022-08-16 | – | 0.8% | 2022-08-16 |
| CVE-2022-31044Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automationrundeck · rundeck · CVSS 7.5 · 2022-06-15 | 7.5 | 0.7% | 2022-06-15 |
| CVE-2017-9856An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very s…Sma · Sunny Boy 3600 Firmware · CVSS 3.4 · 2017-08-05 | 3.4 | 0.7% | 2017-08-05 |
| CVE-2023-4984didi KnowSearch 1 credentials storagedidi · KnowSearch · CVSS 4.3 · 2023-09-15 | 4.3 | 0.7% | 2023-09-15 |
| CVE-2021-36309Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use…Dell · Enterprise SONiC OS · CVSS 7.1 · 2021-10-01 | 7.1 | 0.6% | 2021-10-01 |
| CVE-2025-6560Sapido Wireless Router - Exposure of Sensitive InformationSapido · BR071n · CVSS 9.8 · 2025-06-24 | 9.8 | 0.6% | 2025-06-24 |
| CVE-2023-2632API keys stored and displayed in plain text by Code Dx PluginJenkins · Jenkins Code Dx Plugin · CVSS 4.3 · 2023-05-16 | 4.3 | 0.6% | 2023-05-16 |
| CVE-2022-43426Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.Jenkins project · Jenkins S3 Explorer Plugin · CVSS 5.3 · 2022-10-19 | 5.3 | 0.6% | 2022-10-19 |
| CVE-2024-11982Billion Electric router - Plaintext Storage of a PasswordBillion Electric · M100 · CVSS 7.2 · 2024-11-29 | 7.2 | 0.6% | 2024-11-29 |
| CVE-2023-39452Socomec MOD3GP-SY-120K Plaintext Storage of a PasswordSocomec · MODULYS GP (MOD3GP-SY-120K) · CVSS 7.5 · 2023-09-18 | 7.5 | 0.6% | 2023-09-18 |
| CVE-2024-33375LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.Lb-Link · Bl-W1210m Firmware · CVSS 9.8 · 2024-06-14 | 9.8 | 0.6% | 2024-06-14 |
| CVE-2025-27662Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005.Printerlogic · Vasion Print · CVSS 9.8 · 2025-03-05 | 9.8 | 0.6% | 2025-03-05 |
| CVE-2024-44815Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.Hathway · Skyworth Cm5100-511 Firmware · CVSS 8 · 2024-09-10 | 8.0 | 0.6% | 2024-09-10 |
| CVE-2024-26133EventStoreDB Projections Subsystem has potential password leakEventStore · EventStore · CVSS 5.5 · 2024-02-21 | 5.5 | 0.6% | 2024-02-21 |
| CVE-2024-36460Front-end audit log shows passwords in plaintextZabbix · Zabbix · CVSS 8.1 · 2024-08-09 | 8.1 | 0.6% | 2024-08-09 |
| CVE-2024-9418Insufficiently Protected Credentials in transformeroptimus/superagitransformeroptimus · transformeroptimus/superagi · CVSS 6.5 · 2025-03-20 | 6.5 | 0.6% | 2025-03-20 |
| CVE-2023-4918Plaintext storage of user passwordRedhat · keycloak · CVSS 8.8 · 2023-09-12 | 8.8 | 0.6% | 2023-09-12 |
| CVE-2025-13187Intelbras ICIP acessodeusuario.xml credentials storageIntelbras · ICIP · CVSS 5.3 · 2025-11-14 | 5.3 | 0.6% | 2025-11-14 |
| CVE-2024-36081Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet conv…No vendor recorded · CVSS 9.8 · 2024-05-19 | 9.8 | 0.6% | 2024-05-19 |
| CVE-2024-23486Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page m…BUFFALO INC. · WSR-2533DHP · CVSS 9.8 · 2024-04-15 | 9.8 | 0.6% | 2024-04-15 |
| CVE-2024-36464Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exportedZabbix · Zabbix · CVSS 2.7 · 2024-11-27 | 2.7 | 0.6% | 2024-11-27 |
| CVE-2026-15933Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)OptimiDoc · OptimiDoc Server · CVSS 6.9 · 2026-09-03 | 6.9 | 0.5% | 2026-09-03 |
| CVE-2024-52361IBM Storage Defender - Resiliency Service information disclosureIBM · Storage Defender - Resiliency Service · CVSS 5.7 · 2024-12-18 | 5.7 | 0.5% | 2024-12-18 |
| CVE-2025-4286Intelbras InControl Dispositivos Edição Page credentials storageIntelbras · InControl · CVSS 2.7 · 2025-05-05 | 2.7 | 0.5% | 2025-05-05 |
| CVE-2023-35067Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval SystemInfodrom Software · E-Invoice Approval System · CVSS 7.5 · 2023-07-25 | 7.5 | 0.5% | 2023-07-25 |
| CVE-2025-48046MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in CleartextMICI Network Co. Ltd. · NetFax Server · CVSS 5.3 · 2025-05-29 | 5.3 | 0.5% | 2025-05-29 |
| CVE-2024-3622Mirror-registry: plain-text default csrf secret keyRed Hat · mirror registry for Red Hat OpenShift · CVSS 8.8 · 2024-04-25 | 8.8 | 0.5% | 2024-04-25 |
| CVE-2024-49370Change-Password via Portal-Profile sets PimcoreBackendUser password without hashingpimcore · pimcore · CVSS 8.7 · 2024-10-23 | 8.7 | 0.5% | 2024-10-23 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.