CWE-312

Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certific

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted

Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on

Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the

Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4

Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of

A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POWE

A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POWE

Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security featur

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump

Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before versio

JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test

Dell ThinOS 2502 and prior contain a Cleartext Storage of Sensitive Information vulnerability. A high privileged attacke

The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the C

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorre

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive

In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots

In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access ba

Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose creden

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks

SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be direct

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all vers

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fa

Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a l

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions),

A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub

Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authen

IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user.

Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xm

Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing `config.xm

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network a

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configu

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (

Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security

A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmow

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exp

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue i

Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_sa

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unk

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue

A vulnerability classified as problematic has been found in Bharti Airtel Thanks App 4.105.4 on Android. Affected is an