CWE-312

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engi

IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM

IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Fo

An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cl

Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observabilit

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text password storage vulnerabil

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X

Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerabili

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows att

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that i

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-t

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25

In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attack

In all versions of GitLab, marshalled session keys were being stored in Redis.

An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.

Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure.

Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leadin

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potent

IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be rea

IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore p

An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged.

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which prese

Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.pass

In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configu

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monit

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear tex

Rich Text Edit Control Information Disclosure Vulnerability

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application wr

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local u

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's a

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to inf

IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used

Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP versi

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user creden

Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of interna

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions ex

RICON Industrial Cellular Router S9922L 16.10.3(3794) is affected by cleartext storage of sensitive information and send

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: O

An issue obscuring passwords in screenshots was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadO

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, password inf

The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix p

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenti

A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authentic

Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaint

GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext.