CWE-312 · Cryptography
Cleartext Storage of Sensitive Information
771CVEs
2exploited
4with a public check
7likely (EPSS 10%+)
SortMost likely exploited
771 CVEs with CWE-312 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-22894In CISA KEVExploitedStrapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns…Strapi · Strapi · CVSS 7.2 · 2023-04-19 | 7.2 | 4.1% | 2023-04-19 |
| CVE-2011-4723In CISA KEVExploitedThe D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.D-Link · DIR-300 Router · CVSS 5.7 · 2011-12-20 | 5.7 | 3.1% | 2011-12-20 |
| CVE-2022-26148CheckGrafana & Zabbix Integration - Credentials DisclosureGrafana · Grafana · 2022-03-21 | – | 53% | 2022-03-21 |
| CVE-2021-28937CheckAcexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password DisclosureAcexy · Wireless-N Wifi Repeater Firmware · 2021-03-29 | – | 4.2% | 2021-03-29 |
| CVE-2020-10532CheckWatchGuard Fireware AD Helper Component - Credentials DisclosureWatchguard · Ad Helper Firmware · 2020-03-12 | – | 2.8% | 2020-03-12 |
| CVE-2024-3742CheckElectrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials DisclosureElectrolink · Compact DAB Transmitter · CVSS 7.5 · 2024-04-18 | 7.5 | 1.4% | 2024-04-18 |
| CVE-2021-27140An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs.Fiberhome · Hg6245d Firmware · 2021-02-10 | – | 19% | 2021-02-10 |
| CVE-2020-24577An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin…Dlink · Dsl-2888a Firmware · 2021-01-08 | – | 19% | 2021-01-08 |
| CVE-2021-27176An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions.Fiberhome · Hg6245d Firmware · 2021-02-10 | – | 19% | 2021-02-10 |
| CVE-2021-27174An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions.Fiberhome · Hg6245d Firmware · 2021-02-10 | – | 19% | 2021-02-10 |
| CVE-2021-27178An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram.Fiberhome · Hg6245d Firmware · 2021-02-10 | – | 18% | 2021-02-10 |
| CVE-2021-27175An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions.Fiberhome · Hg6245d Firmware · 2021-02-10 | – | 18% | 2021-02-10 |
| CVE-2018-8947rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restricti…Laravel Log Viewer Project · Laravel Log Viewer · 2018-03-25 | – | 11% | 2018-03-25 |
| CVE-2013-2680Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information.Cisco · Linksys E4200 Firmware · 2020-02-05 | – | 8.7% | 2020-02-05 |
| CVE-2019-0285The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by…SAP SE · SAP Crystal Reports for Visual Studio · 2019-04-10 | – | 6.6% | 2019-04-10 |
| CVE-2020-5723The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated p…Grandstream · Grandstream UCM6200 series · 2020-03-30 | – | 5.9% | 2020-03-30 |
| CVE-2016-8366Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro ca…Phoenix Contact · Phoenix Contact ILC PLCs · 2018-04-05 | – | 5.7% | 2018-04-05 |
| CVE-2021-36782Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io objectSUSE · Rancher · CVSS 9.9 · 2022-09-07 | 9.9 | 4.2% | 2022-09-07 |
| CVE-2018-11242An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive informati…Makemytrip · Makemytrip · 2018-05-20 | – | 3.9% | 2018-05-20 |
| CVE-2023-24055KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trig…Keepass · Keepass · 2023-01-22 | – | 3.8% | 2023-01-22 |
| CVE-2023-31069An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.Tsplus · Tsplus Remote Work · 2023-09-11 | – | 3.7% | 2023-09-11 |
| CVE-2025-27532A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via…Bosch Rexroth AG · ctrlX OS - Device Admin · CVSS 6.5 · 2025-04-30 | 6.5 | 3.6% | 2025-04-30 |
| CVE-2025-22896mySCADA myPRO Manager Cleartext Storage of Sensitive InformationmySCADA · myPRO Manager · CVSS 8.6 · 2025-02-13 | 8.6 | 3.6% | 2025-02-13 |
| CVE-2026-22240Plaintext Passwords Vulnerability in BLUVOYIXBluspark Global · BLUVOYIX · CVSS 10 · 2026-01-14 | 10.0 | 3.4% | 2026-01-14 |
| CVE-2001-1481Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to ga…Xitami · Xitami · 2005-06-21 | – | 3.2% | 2005-06-21 |
| CVE-2008-6157SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sensitive information.Sepcity · Classified Ads · 2009-02-17 | – | 3.0% | 2009-02-17 |
| CVE-2020-17511In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when cre…Apache Software Foundation · Apache Airflow · 2020-12-14 | – | 2.6% | 2020-12-14 |
| CVE-2017-14990WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote a…Wordpress · Wordpress · 2017-10-02 | – | 2.3% | 2017-10-02 |
| CVE-2009-0152iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting,…Apple · Mac Os X · 2009-05-13 | – | 2.2% | 2009-05-13 |
| CVE-2019-11966A remote privilege escalation vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.Hp · HPE Intelligent Management Center (IMC) PLAT · 2019-06-05 | – | 2.1% | 2019-06-05 |
| CVE-2014-5433An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System versi…Baxter · SIGMA Spectrum Infusion System · 2019-03-26 | – | 2.1% | 2019-03-26 |
| CVE-2005-2160IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information.Ipswitch · Imail · 2005-07-06 | – | 2.0% | 2005-07-06 |
| CVE-2008-0174GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote…Ge · Proficy Real-Time Information Portal · 2008-01-29 | – | 2.0% | 2008-01-29 |
| CVE-2009-0964UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged wit…Xlinesoft · Phprunner · 2009-03-19 | – | 1.9% | 2009-03-19 |
| CVE-2019-19228Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf f…Fronius · Datamanager Box 2.0 Firmware · 2019-12-04 | – | 1.9% | 2019-12-04 |
| CVE-2022-29620FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerabilityFilezilla-Project · Filezilla Client · 2022-06-07 | – | 1.9% | 2022-06-07 |
| CVE-2020-11694In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3.Jetbrains · Pycharm · 2020-04-10 | – | 1.9% | 2020-04-10 |
| CVE-2023-40238A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before…Insyde · Insydeh2o · CVSS 5.5 · 2023-12-07 | 5.5 | 1.8% | 2023-12-07 |
| CVE-2018-19981Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use…Amazon · Aws Software Development Kit · 2019-04-04 | – | 1.8% | 2019-04-04 |
| CVE-2009-5068There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins"…SMF · SMF · 2020-01-15 | – | 1.7% | 2020-01-15 |
| CVE-2019-10350Jenkins Port Allocator Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or acce…Jenkins project · Jenkins Port Allocator Plugin · 2019-07-11 | – | 1.7% | 2019-07-11 |
| CVE-2019-10348Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the…Jenkins project · Jenkins Gogs Plugin · 2019-07-11 | – | 1.7% | 2019-07-11 |
| CVE-2019-10443Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permi…Jenkins project · Jenkins iceScrum Plugin · 2019-10-16 | – | 1.6% | 2019-10-16 |
| CVE-2019-10351Jenkins Caliper CI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access t…Jenkins project · Jenkins Caliper CI Plugin · 2019-07-11 | – | 1.6% | 2019-07-11 |
| CVE-2023-46386LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file. This vulnerability allows remote attackers to di…Loytec · Linx-212 Firmware · 2023-11-30 | – | 1.6% | 2023-11-30 |
| CVE-2019-9823In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the I…Jetbrains · Intellij Idea · 2019-07-03 | – | 1.6% | 2019-07-03 |
| CVE-2019-9873In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE c…Jetbrains · Intellij Idea · 2019-07-03 | – | 1.6% | 2019-07-03 |
| CVE-2019-15947In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can re…Bitcoin · Bitcoin Core · 2019-09-05 | – | 1.6% | 2019-09-05 |
| CVE-2023-46388LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This vulnerability allows remote attackers to…Loytec · Linx-212 Firmware · 2023-11-30 | – | 1.5% | 2023-11-30 |
| CVE-2023-46384LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password…Loytec · L-Inx Configurator · 2023-11-30 | – | 1.5% | 2023-11-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.