CWE-312

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some confi

In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passw

A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are sto

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an

The administrative passwords for all versions of Bond JetSelect are stored within an unprotected file on the filesystem,

IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated

An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive inf

In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in

A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at res

"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administr

IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain direc

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configur

A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently store

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a us

A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder (Version 1.4.7.2 and older

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext,

Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the

The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the times

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissi

NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration

Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session (base64-encod

IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COO

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (Al

Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify

If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffic

A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and earli

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). Insecure storage of sensitive inform

A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earli

SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.

An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can r

BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with

SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is st

Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where t

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF

IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authen

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, whe

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont

An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive databas

The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), wh

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to s

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartex

TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password f

A remote privilege escalation vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewe

Jenkins Port Allocator Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they ca

Jenkins Caliper CI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be