CWE-540 · Information Disclosure
Inclusion of Sensitive Information in Source Code
36CVEs
SortMost likely exploited
36 CVEs with CWE-540 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-1516Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure VulnerabilityCisco · Cisco Web Security Appliance (WSA) · CVSS 4.3 · 2021-05-06 | 4.3 | 1.0% | 2021-05-06 |
| CVE-2024-2265keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source codekeerti1924 · PHP-MYSQL-User-Login-System · CVSS 5.3 · 2024-03-07 | 5.3 | 0.8% | 2024-03-07 |
| CVE-2023-30802Sangfor Next-Gen Application Firewall Source Code DisclosureSangfor · Net-Gen Application Firewall · CVSS 5.3 · 2023-10-10 | 5.3 | 0.8% | 2023-10-10 |
| CVE-2023-23448Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attac…SICK AG · SICK FTMG-ESD15AXX AIR FLOW SENSOR · CVSS 5.3 · 2023-05-15 | 5.3 | 0.8% | 2023-05-15 |
| CVE-2021-34744Cisco Business 220 Series Smart Switches Static Key and Password VulnerabilitiesCisco · Cisco Small Business 220 Series Smart Plus Switches · CVSS 4.9 · 2021-10-06 | 4.9 | 0.7% | 2021-10-06 |
| CVE-2024-8417云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in sourceYunknet · Yunke Online School System · CVSS 3.1 · 2024-09-04 | 3.1 | 0.7% | 2024-09-04 |
| CVE-2026-4155ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure VulnerabilityChargePoint · Home Flex · CVSS 7.5 · 2026-04-11 | 7.5 | 0.7% | 2026-04-11 |
| CVE-2024-38647QNAP AI CoreQNAP Systems Inc. · QNAP AI Core · CVSS 7.9 · 2024-11-22 | 7.9 | 0.7% | 2024-11-22 |
| CVE-2024-2355keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source codekeerti1924 · Secret-Coder-PHP-Project · CVSS 3.7 · 2024-03-10 | 3.7 | 0.6% | 2024-03-10 |
| CVE-2021-34757Cisco Business 220 Series Smart Switches Static Key and Password VulnerabilitiesCisco · Cisco Small Business 220 Series Smart Plus Switches · CVSS 4.9 · 2021-10-06 | 4.9 | 0.6% | 2021-10-06 |
| CVE-2025-49182Credential disclosureSICK AG · SICK Media Server · CVSS 7.5 · 2025-06-12 | 7.5 | 0.6% | 2025-06-12 |
| CVE-2026-105623Zenitel Connect web interface serves production JavaScript source maps without authenticationZenitel · Zenitel Connect · CVSS 6.9 · 2026-11-13 | 6.9 | 0.5% | 2026-11-13 |
| CVE-2026-84390A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker t…Fortinet · FortiMonitorOnSight · CVSS 9.6 · 2026-09-11 | 9.6 | 0.5% | 2026-09-11 |
| CVE-2026-73591Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated att…Dell · Secure Connect Gateway (SCG) Policy Manager · CVSS 7.5 · 2026-09-23 | 7.5 | 0.4% | 2026-09-23 |
| CVE-2026-78192WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index pageWebDyne · CVSS 7.5 · 2026-10-31 | 7.5 | 0.4% | 2026-10-31 |
| CVE-2025-26013An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.Olajowon · Loggrove · CVSS 8.2 · 2025-02-21 | 8.2 | 0.4% | 2025-02-21 |
| CVE-2024-39729IBM Datacap Navigator information disclosureIBM · Datacap Navigator · CVSS 4.3 · 2024-07-15 | 4.3 | 0.4% | 2024-07-15 |
| CVE-2025-3403Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in sourceVivotek · NVR ND8422P · CVSS 2.7 · 2025-04-08 | 2.7 | 0.4% | 2025-04-08 |
| CVE-2024-1272Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit SoftwareTNB Mobile Solutions · Cockpit Software · CVSS 7.5 · 2024-06-05 | 7.5 | 0.4% | 2024-06-05 |
| CVE-2026-16581Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Applicationigloohome · Smart Lock Mobile Application · CVSS 5.3 · 2026-07-28 | 5.3 | 0.4% | 2026-07-28 |
| CVE-2025-23215PMD Designer's release key passphrase (GPG) available on Maven Central in cleartextpmd · pmd · CVSS 9.3 · 2025-01-31 | 9.3 | 0.3% | 2025-01-31 |
| CVE-2024-38327IBM Analytics Content Hub information disclosureIBM · Analytics Content Hub · CVSS 6.8 · 2025-07-10 | 6.8 | 0.3% | 2025-07-10 |
| CVE-2024-9596Inclusion of Sensitive Information in Source Code in GitLabGitLab · GitLab · CVSS 3.7 · 2024-10-10 | 3.7 | 0.3% | 2024-10-10 |
| CVE-2024-35144IBM Maximo Application Suite information disclosureIBM · Maximo Application Suite · CVSS 5.3 · 2025-01-25 | 5.3 | 0.3% | 2025-01-25 |
| CVE-2024-27257IBM OpenPages information disclosureIBM · OpenPages · CVSS 4.3 · 2024-09-10 | 4.3 | 0.3% | 2024-09-10 |
| CVE-2025-36076IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilitiesIBM · Cognos Analytics · CVSS 4.3 · 2026-09-18 | 4.3 | 0.3% | 2026-09-18 |
| CVE-2025-0923IBM Cognos Analytics information disclosureIBM · Cognos Analytics · CVSS 5.3 · 2025-06-11 | 5.3 | 0.3% | 2025-06-11 |
| CVE-2026-35383Bentley Systems iTwin Platform exposed access tokenBentley Systems · iTwin Platform · CVSS 6.5 · 2026-04-02 | 6.5 | 0.3% | 2026-04-02 |
| CVE-2024-55907IBM Cognos Mobile information disclosureIBM · Cognos Analytics Mobile · CVSS 2 · 2025-03-02 | 2.0 | 0.3% | 2025-03-02 |
| CVE-2026-101265Intelbras TIP 125i Básico sensitive information in sourceIntelbras · TIP 125i · CVSS 3.1 · 2026-09-28 | 3.1 | 0.3% | 2026-09-28 |
| CVE-2021-28805Inclusion of Sensitive Information in QSSQNAP Systems Inc. · QSS · CVSS 7.8 · 2021-06-11 | 7.8 | 0.2% | 2021-06-11 |
| CVE-2025-36299IBM Planning Analytics Information DisclosureIBM · IBM Planning Analytics Local · CVSS 4.3 · 2025-11-17 | 4.3 | 0.2% | 2025-11-17 |
| CVE-2025-0166Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeIBM · watsonx Orchestrate Cartridge for Cloud Pak for Data · CVSS 2.7 · 2026-11-08 | 2.7 | 0.2% | 2026-11-08 |
| CVE-2023-35013IBM Security Verify Governance information disclosureIBM · Security Verify Governance · CVSS 2.3 · 2023-10-15 | 2.3 | 0.2% | 2023-10-15 |
| CVE-2026-22275Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Inclusion of Sensitive Information in Source Code vulnerability. A low priv…Dell · ObjectScale · CVSS 4.4 · 2026-01-23 | 4.4 | 0.1% | 2026-01-23 |
| CVE-2023-39250Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1…Dell · Dell Storage Integration Tools for VMware (DSITV), Dell Storage vSphere Client… · CVSS 7.8 · 2023-08-16 | 7.8 | 0.1% | 2023-08-16 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.