CWE-313 · Cryptography
Cleartext Storage in a File or on Disk
32CVEs
SortMost likely exploited
32 CVEs with CWE-313 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2016-6538TrackR Bravo mobile application stores account passwords in cleartextTrackR · Bravo Mobile Application · 2018-07-06 | – | 1.0% | 2018-07-06 |
| CVE-2019-19291A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR V…Siemens · Control Center Server (CCS) · CVSS 5.3 · 2020-03-10 | 5.3 | 0.7% | 2020-03-10 |
| CVE-2016-6547Zizai Tech Nut stores the account password in cleartextZizai Technology · Tech Nut Mobile Application · 2018-07-13 | – | 0.4% | 2018-07-13 |
| CVE-2016-6546iTrack Easy mobile application stores the user password in base-64 encoding/cleartextiTrack · Easy · 2018-07-13 | – | 0.4% | 2018-07-13 |
| CVE-2018-10622Medtronic MyCareLink Patient Monitor Network Credential WeaknessMedtronic · 24950 MyCareLink Monitor · CVSS 5.2 · 2018-08-10 | 5.2 | 0.4% | 2018-08-10 |
| CVE-2026-90842PHPGurukul Blood Donor Management System Login_Model.php cleartext storage in filePHPGurukul · Blood Donor Management System · CVSS 3.7 · 2026-09-14 | 3.7 | 0.3% | 2026-09-14 |
| CVE-2025-2120Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on diskThinkware · Car Dashcam F800 Pro · CVSS 2.1 · 2025-03-09 | 2.1 | 0.3% | 2025-03-09 |
| CVE-2024-5916PAN-OS: Cleartext Exposure of External System SecretsPalo Alto Networks · PAN-OS · CVSS 6 · 2024-08-14 | 6.0 | 0.2% | 2024-08-14 |
| CVE-2023-2863Simple Design Daily Journal SQLite Database cleartext storage in a file or on diskSimple Design · Daily Journal · CVSS 2.3 · 2023-05-24 | 2.3 | 0.2% | 2023-05-24 |
| CVE-2026-5531SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in fileSourceCodester · Student Result Management System · CVSS 5.3 · 2026-04-05 | 5.3 | 0.2% | 2026-04-05 |
| CVE-2025-14836ZZCMS User Data Storage user_save.php cleartext storage in fileZzcms · ZZCMS · CVSS 2.7 · 2025-12-17 | 2.7 | 0.2% | 2025-12-17 |
| CVE-2023-35699Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.SICK AG · ICR890-4 · CVSS 5.3 · 2023-07-10 | 5.3 | 0.2% | 2023-07-10 |
| CVE-2026-52783OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposureopf · openproject · CVSS 8.2 · 2026-06-26 | 8.2 | 0.2% | 2026-06-26 |
| CVE-2025-5154PhonePe App SQLite Database databases cleartext storage in filePhonepe · PhonePe App · CVSS 2.3 · 2025-05-25 | 2.3 | 0.2% | 2025-05-25 |
| CVE-2023-4066Operator: passwords defined in secrets shown in statefulset yamlRed Hat · RHEL-8 based Middleware Containers · CVSS 5.5 · 2023-09-27 | 5.5 | 0.2% | 2023-09-27 |
| CVE-2024-9040code-projects Blood Bank Management System Password cleartext storage in a file or on diskcode-projects · Blood Bank Management System · CVSS 2.3 · 2024-09-20 | 2.3 | 0.2% | 2024-09-20 |
| CVE-2026-6598langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in filelangflow-ai · langflow · CVSS 4.3 · 2026-04-20 | 4.3 | 0.2% | 2026-04-20 |
| CVE-2024-38280Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Motorola Solutions · Vigilant Fixed LPR Coms Box (BCAV1F2-C600) · CVSS 7 · 2024-06-13 | 7.0 | 0.2% | 2024-06-13 |
| CVE-2026-6796Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in fileSanluan · PublicCMS · CVSS 4.3 · 2026-04-21 | 4.3 | 0.1% | 2026-04-21 |
| CVE-2023-0114Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on diskNetis · Netcore Router · CVSS 3.3 · 2023-01-07 | 3.3 | 0.1% | 2023-01-07 |
| CVE-2024-49762Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabledpterodactyl · panel · CVSS 4.6 · 2024-10-24 | 4.6 | 0.1% | 2024-10-24 |
| CVE-2025-64305Columbia Weather Systems MicroServer Cleartext Storage in a File or on DiskColumbia Weather Systems · MicroServer · CVSS 6.5 · 2026-01-07 | 6.5 | 0.1% | 2026-01-07 |
| CVE-2024-30406Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentialsJuniper Networks · Junos OS Evolved · CVSS 5.5 · 2024-04-12 | 5.5 | 0.1% | 2024-04-12 |
| CVE-2025-4397Medtronic MyCareLink Patient Monitor Data Encryption WeaknessMedtronic · MyCareLink Patient Monitor 24950 · CVSS 6.8 · 2026-05-07 | 6.8 | 0.1% | 2026-05-07 |
| CVE-2025-6748Bharti Airtel Thanks App files cleartext storage in a file or on diskBharti Airtel · Thanks App · CVSS 2.1 · 2025-06-27 | 2.1 | 0.1% | 2025-06-27 |
| CVE-2024-20448Cisco Nexus Dashboard Fabric Controller Credential Information Disclosure VulnerabilityCisco · Cisco Data Center Network Manager · CVSS 6.3 · 2024-10-02 | 6.3 | 0.1% | 2024-10-02 |
| CVE-2026-14663PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartextPostgresql · PostgreSQL · CVSS 6.5 · 2026-08-13 | 6.5 | 0.1% | 2026-08-13 |
| CVE-2024-6785MXview One and MXview One Central Manager Series store cleartext credentials in a local fileMoxa · MXview One Series · CVSS 5.5 · 2024-09-21 | 5.5 | 0.1% | 2024-09-21 |
| CVE-2026-8804Cleartext Storage of Sensitive Information for Puppet Resource APIPerforce · Puppet Core · CVSS 6.7 · 2026-07-03 | 6.7 | 0.1% | 2026-07-03 |
| CVE-2025-36154IBM Concert Software Cleartext Storage in a File or on Disk.IBM · Concert · CVSS 6.2 · 2025-12-24 | 6.2 | 0.1% | 2025-12-24 |
| CVE-2026-5769A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Broca…Brocade · Brocade SANnav · CVSS 5.6 · 2026-10-08 | 5.6 | 0.1% | 2026-10-08 |
| CVE-2026-24349A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V…Siemens · SIMATIC WinCC Unified PC Runtime V16 · CVSS 7.1 · 2026-06-09 | 7.1 | 0.1% | 2026-06-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.