CWE-522 · Authentication
Insufficiently Protected Credentials
1,215CVEs
5exploited
8with a public check
14likely (EPSS 10%+)
SortMost likely exploited
1,215 CVEs with CWE-522 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-29583In CISA KEVExploitedZyXel USG - Hardcoded CredentialsZyxel · Multiple Products · CVSS 9.8 · 2020-12-22 | 9.8 | 90% | 2020-12-22 |
| CVE-2021-30116In CISA KEVExploitedKaseya VSA < 9.5.7 - Credential Disclosure via Windows AgentKaseya · Virtual System/Server Administrator (VSA) · CVSS 10 · 2021-07-09 | 10.0 | 86% | 2021-07-09 |
| CVE-2017-9248In CISA KEVExploitedTelerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryption…Progress · ASP.NET AJAX and Sitefinity · CVSS 9.8 · 2017-07-03 | 9.8 | 75% | 2017-07-03 |
| CVE-2014-1812In CISA KEVExploitedThe Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does…Microsoft · Windows · CVSS 8.8 · 2014-05-14 | 8.8 | 65% | 2014-05-14 |
| CVE-2021-22681In CISA KEVExploitedRockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell…Rockwell · Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers · CVSS 9.8 · 2021-03-03 | 9.8 | 64% | 2021-03-03 |
| CVE-2024-44000CheckLiteSpeed Cache <= 6.4.1 - Sensitive Information ExposureLiteSpeed Technologies · LiteSpeed Cache · CVSS 9.8 · 2024-10-20 | 9.8 | 82% | 2024-10-20 |
| CVE-2024-32238CheckH3C ER8300G2-X - Password DisclosureNo vendor recorded · CVSS 9.8 · 2024-04-22 | 9.8 | 53% | 2024-04-22 |
| CVE-2017-8225CheckGoAhead Camera - Credential DisclosureWificam · Wireless Ip Camera (p2p) Firmware · 2017-04-25 | – | 35% | 2017-04-25 |
| CVE-2022-1026CheckKyocera Net View Address Book ExposureKyocera · Multifunction Printer Net Viewer · CVSS 8.6 · 2022-04-04 | 8.6 | 15% | 2022-04-04 |
| CVE-2024-9014CheckpgAdmin 4 - Authentication Bypasspgadmin.org · pgAdmin 4 · CVSS 9.9 · 2024-09-23 | 9.9 | 9.7% | 2024-09-23 |
| CVE-2021-44451CheckApache Superset <=1.3.2 - Default LoginApache Software Foundation · Apache Superset · 2022-02-01 | – | 7.9% | 2022-02-01 |
| CVE-2019-19823CheckTOTOLINK/Realtek Routers - Information DisclosureTotolink · A3002ru Firmware · 2020-01-27 | – | 6.4% | 2020-01-27 |
| CVE-2025-28228CheckElectrolink FM/DAB/TV Transmitter - Credentials DisclosureElectrolink · Fm/dab/tv Transmitter Web Management System · CVSS 7.5 · 2025-04-18 | 7.5 | 1.8% | 2025-04-18 |
| CVE-2018-9160SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.Sickrage · Sickrage · 2018-03-31 | – | 76% | 2018-03-31 |
| CVE-2014-6039ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed version 10 Build 10000.Zohocorp · Manageengine Eventlog Analyzer · 2020-01-13 | – | 69% | 2020-01-13 |
| CVE-2022-37109patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to the password.txt file is not properly r…Camp Project · Camp · CVSS 9.8 · 2022-11-14 | 9.8 | 49% | 2022-11-14 |
| CVE-2022-35411rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the d…Rpc.py Project · Rpc.py · 2022-07-08 | – | 47% | 2022-07-08 |
| CVE-2017-3192D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admin.asp page discloses the administrator…D-Link · DIR-130 · 2017-12-15 | – | 39% | 2017-12-15 |
| CVE-2026-21852Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmationanthropics · claude-code · CVSS 5.3 · 2026-01-21 | 5.3 | 28% | 2026-01-21 |
| CVE-2013-7052D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi scriptDlink · Dir-100 Firmware · 2020-02-04 | – | 25% | 2020-02-04 |
| CVE-2023-28131A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Pr…Expo.io · Expo AuthSession module · CVSS 9.6 · 2023-04-24 | 9.6 | 23% | 2023-04-24 |
| CVE-2018-3609A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information…Trend Micro · Trend Micro InterScan Messaging Security Virtual Appliance · 2018-02-16 | – | 21% | 2018-02-16 |
| CVE-2017-17106Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP requ…Zivif · Pr115-204-P-Rs Firmware · 2017-12-18 | – | 15% | 2017-12-18 |
| CVE-2018-11742NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.Nec · Univerge Sv9100 Webpro Firmware · 2018-12-26 | – | 14% | 2018-12-26 |
| CVE-2023-38548A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Repor…Veeam · One · CVSS 9.8 · 2023-11-07 | 9.8 | 12% | 2023-11-07 |
| CVE-2012-5627Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within th…Oracle · Mysql · 2013-10-01 | – | 11% | 2013-10-01 |
| CVE-2000-0944CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify…Cgi · Script Center News Update · 2001-01-22 | – | 11% | 2001-01-22 |
| CVE-2012-6663General Electric D20ME devices are not properly configured and reveal plaintext passwords.Ge · D20me Firmware · 2020-01-23 | – | 9.5% | 2020-01-23 |
| CVE-2022-28005An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitra…3cx · 3cx · 2022-05-06 | – | 8.3% | 2022-05-06 |
| CVE-2019-11369An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may allow sensitive information to be read by…Carel · Pcoweb Card Firmware · 2019-06-03 | – | 8.1% | 2019-06-03 |
| CVE-2022-29457Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path conf…Zohocorp · Manageengine Adselfservice Plus · 2022-04-18 | – | 7.9% | 2022-04-18 |
| CVE-2023-31492Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.Zohocorp · Manageengine Admanager Plus · 2023-08-17 | – | 7.9% | 2023-08-17 |
| CVE-2014-5381Grand MA 300 allows a brute-force attack on the PIN.Granding · Grand Ma300 Firmware · 2020-01-13 | – | 7.1% | 2020-01-13 |
| CVE-2019-1384A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a…Microsoft · Windows · 2019-11-12 | – | 7.0% | 2019-11-12 |
| CVE-2013-7055D-Link DIR-100 4.03B07 has PPTP and poe information disclosureDlink · Dir-100 Firmware · 2020-02-04 | – | 7.0% | 2020-02-04 |
| CVE-2018-18074The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for re…Python · Requests · 2018-10-09 | – | 6.9% | 2018-10-09 |
| CVE-2021-29262Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settingsApache Software Foundation · Apache Solr · 2021-04-13 | – | 6.7% | 2021-04-13 |
| CVE-2019-7260Linear eMerge E3-Series devices have Cleartext Credentials in a Database.Nortekcontrol · Linear Emerge Essential Firmware · 2019-07-02 | – | 6.6% | 2019-07-02 |
| CVE-2017-7486PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associ…The PostgreSQL Global Development Group · PostgreSQL · 2017-05-12 | – | 6.3% | 2017-05-12 |
| CVE-2019-17497Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). For example, an NTLM hash…Pdf-Xchange · Pdf-Xchange Editor · 2019-10-10 | – | 6.3% | 2019-10-10 |
| CVE-2018-10286The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via th…Ericssonlg · Ipecs Nms · 2018-04-22 | – | 6.3% | 2018-04-22 |
| CVE-2019-12423Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens is…Apache · CXF · 2020-01-16 | – | 6.1% | 2020-01-16 |
| CVE-2018-5708An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's panel, a user can obtain the adm…Dlink · Dir-601 Firmware · 2018-03-30 | – | 6.0% | 2018-03-30 |
| CVE-2017-7547PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user…PostgreSQL · postgresql · 2017-08-16 | – | 5.6% | 2017-08-16 |
| CVE-2007-0681profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other una…Extcalendar Project · Extcalendar · 2007-02-03 | – | 5.4% | 2007-02-03 |
| CVE-2014-3445backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows remote attackers to bypass authentication by leveraging kno…Handsomeweb · Sos Webpages · 2020-01-28 | – | 5.3% | 2020-01-28 |
| CVE-2021-27935An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stor…Adguard · Adguard Home · 2021-03-03 | – | 5.0% | 2021-03-03 |
| CVE-2017-8837Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.…Peplink · B305hw2 Firmware · 2017-06-05 | – | 4.9% | 2017-06-05 |
| CVE-2024-37051GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3;…JetBrains · IntelliJ IDEA · CVSS 9.3 · 2024-06-10 | 9.3 | 4.9% | 2024-06-10 |
| CVE-2022-38121POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected CredentialsPOWERCOM CO., LTD. · UPSMON PRO · CVSS 6.5 · 2022-11-10 | 6.5 | 4.7% | 2022-11-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.