CWE-316 · Cryptography
Cleartext Storage of Sensitive Information in Memory
42CVEs
SortMost likely exploited
42 CVEs with CWE-316 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2014-2366Advantech WebAccess Cleartext Storage of Sensitive Information in MemoryAdvantech · WebAccess · CVSS 9 · 2014-07-19 | 9.0 | 1.3% | 2014-07-19 |
| CVE-2024-33901Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor dispu…Keepassxc · Keepassxc · CVSS 6.5 · 2024-05-20 | 6.5 | 0.7% | 2024-05-20 |
| CVE-2022-29832Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer…Mitsubishi Electric Corporation · GX Works3 · CVSS 3.7 · 2022-11-24 | 3.7 | 0.7% | 2022-11-24 |
| CVE-2019-3733RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'H…Dell · RSA BSAFE Crypto-C Micro Edition · CVSS 4.4 · 2019-09-30 | 4.4 | 0.6% | 2019-09-30 |
| CVE-2023-3762Intergard SGS sensitive information in memoryIntergard · SGS · CVSS 4.3 · 2023-07-19 | 4.3 | 0.4% | 2023-07-19 |
| CVE-2021-31989A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager…Axis Communications AB · AXIS Device Manager · 2021-08-25 | – | 0.4% | 2021-08-25 |
| CVE-2025-52579Emerson ValveLink Products Cleartext Storage of Sensitive Information in MemoryEmerson · ValveLink SOLO · CVSS 9.4 · 2025-07-10 | 9.4 | 0.4% | 2025-07-10 |
| CVE-2023-44153Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows)…Acronis · Acronis Cyber Protect 15 · CVSS 2.2 · 2023-09-27 | 2.2 | 0.4% | 2023-09-27 |
| CVE-2024-33900KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-managem…Keepassxc · Keepassxc · CVSS 6.5 · 2024-05-20 | 6.5 | 0.3% | 2024-05-20 |
| CVE-2024-36792An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.Netgear · Wnr614 Firmware · CVSS 8.2 · 2024-06-07 | 8.2 | 0.3% | 2024-06-07 |
| CVE-2025-60794Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a wind…Perfood · Couchauth · CVSS 6.5 · 2025-11-20 | 6.5 | 0.2% | 2025-11-20 |
| CVE-2024-49800IBM ApplinX Information DisclosureIBM · ApplinX · CVSS 4.3 · 2025-02-05 | 4.3 | 0.2% | 2025-02-05 |
| CVE-2024-24915SmartConsole Sensitive Credential Exposure via Memory Dumpcheckpoint · Check Point SmartConsole · CVSS 6.1 · 2025-06-29 | 6.1 | 0.2% | 2025-06-29 |
| CVE-2026-8636Multiple Vulnerabilities in IBM DatacapIBM · Datacap · CVSS 5.5 · 2026-06-22 | 5.5 | 0.2% | 2026-06-22 |
| CVE-2024-39732IBM Datacap Navigator information disclosureIBM · Datacap Navigator · CVSS 4.1 · 2024-07-14 | 4.1 | 0.2% | 2024-07-14 |
| CVE-2025-56565DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material…No vendor recorded · CVSS 7.6 · 2026-09-16 | 7.6 | 0.2% | 2026-09-16 |
| CVE-2021-32942The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnosti…AVEVA · InTouch · CVSS 6.6 · 2021-06-09 | 6.6 | 0.2% | 2021-06-09 |
| CVE-2022-0835AVEVA System Platform Cleartext Storage of Sensitive Information in MemoryAVEVA · AVEVA System Platform · CVSS 8.1 · 2022-04-11 | 8.1 | 0.2% | 2022-04-11 |
| CVE-2021-23182Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps. Thi…Gallagher · Command Centre · CVSS 6 · 2021-06-11 | 6.0 | 0.2% | 2021-06-11 |
| CVE-2024-35282A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions…Fortinet · FortiClientiOS · CVSS 3.9 · 2024-09-10 | 3.9 | 0.2% | 2024-09-10 |
| CVE-2025-65832The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi cre…Meatmeet · Meatmeet · CVSS 4.6 · 2025-12-10 | 4.6 | 0.1% | 2025-12-10 |
| CVE-2022-46141A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the…Siemens · SIMATIC STEP 7 (TIA Portal) · CVSS 4.2 · 2023-12-12 | 4.2 | 0.1% | 2023-12-12 |
| CVE-2025-50109Emerson ValveLink Products Cleartext Storage of Sensitive Information in MemoryEmerson · ValveLink SOLO · CVSS 7.7 · 2025-07-10 | 7.7 | 0.1% | 2025-07-10 |
| CVE-2025-48930The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.TeleMessage · service · CVSS 2.8 · 2025-05-28 | 2.8 | 0.1% | 2025-05-28 |
| CVE-2022-33918Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access t…Dell · GeoDrive · CVSS 5.5 · 2022-10-12 | 5.5 | 0.1% | 2022-10-12 |
| CVE-2024-9203Enpass Password Manager sensitive information in memoryEnpass · Password Manager · CVSS 2.5 · 2024-09-26 | 2.5 | 0.1% | 2024-09-26 |
| CVE-2026-77407RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fieldsrabbitmq · amqp091-go · CVSS 7 · 2026-09-16 | 7.0 | 0.1% | 2026-09-16 |
| CVE-2023-40724A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get…Siemens · QMS Automotive · CVSS 7.3 · 2023-09-12 | 7.3 | 0.1% | 2023-09-12 |
| CVE-2025-61713A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all v…Fortinet · FortiPAM · CVSS 3.8 · 2025-11-18 | 3.8 | 0.1% | 2025-11-18 |
| CVE-2025-42888Information Disclosure vulnerability in SAP GUI for WindowsSAP_SE · SAP GUI for Windows · CVSS 5.5 · 2025-11-11 | 5.5 | 0.1% | 2025-11-11 |
| CVE-2025-60791Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after…No vendor recorded · CVSS 6.2 · 2025-10-27 | 6.2 | 0.1% | 2025-10-27 |
| CVE-2021-23211Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key to be discoverable in server memory du…Gallagher · Command Centre · CVSS 6 · 2021-06-11 | 6.0 | 0.1% | 2021-06-11 |
| CVE-2026-24319Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)SAP_SE · SAP Business One (B1 Client Memory Dump Files) · CVSS 5.8 · 2026-02-10 | 5.8 | 0.1% | 2026-02-10 |
| CVE-2025-9970Application credential stored in clear text in memoryABB · MConfig · CVSS 7.4 · 2025-10-08 | 7.4 | 0.1% | 2025-10-08 |
| CVE-2026-75137UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after LockSepteo IT Solutions · UpSignOn · CVSS 6.1 · 2026-09-02 | 6.1 | 0.1% | 2026-09-02 |
| CVE-2026-75135UpSignOn < 7.19.0 Sensitive Key Retention in MemorySepteo IT Solutions · UpSignOn · CVSS 6.1 · 2026-09-02 | 6.1 | 0.1% | 2026-09-02 |
| CVE-2025-4618Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma BrowserPalo Alto Networks · Prisma Browser · CVSS 4.4 · 2025-11-14 | 4.4 | 0.1% | 2025-11-14 |
| CVE-2023-23349Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the K…Kaspersky · Kaspersky Password Manager for Windows · CVSS 2.2 · 2024-03-22 | 2.2 | 0.1% | 2024-03-22 |
| CVE-2026-27875Simplex Incident Manager Clear TestJohnson Controls · Simplex Incident Manager / Autocall Fire Administrator · CVSS 6.9 · 2026-08-21 | 6.9 | 0.1% | 2026-08-21 |
| CVE-2026-71455Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrap…Johnson Controls · Kantech Entrapass · CVSS 5.3 · 2026-10-26 | 5.3 | 0.1% | 2026-10-26 |
| CVE-2026-106022Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue…Johnson Controls · EasyIO Neo IOManager and Tools Installer · CVSS 8.6 · 2026-11-06 | 8.6 | 0.1% | 2026-11-06 |
| CVE-2024-25649In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data from a memory dump: the decry…Delinea · Secret Server · CVSS 6.7 · 2024-03-14 | 6.7 | 0.1% | 2024-03-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.