Skip to content
Noroxi

CWE-212 · 105 records

Improper Removal of Sensitive Information Before Storage or Transfer

CVEs in this class

105 records

  • GHSA-x6gv-2rvh-qmp6
    40Plan

    m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected C

    CriticalCVSS 10.0No exploit

    GitHub Actions · m00nl1ght-dev/steam-workshop-deployAug 13, 2025

  • CVE-2022-1650
    38Monitor

    Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource

    CriticalCVSS 9.3No exploitEPSS 1%

    eventsource · eventsourceMay 12, 2022

  • CVE-2020-15094
    36Monitor

    In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class

    HighCVSS 8.8No exploitEPSS 3%

    sensiolabs · httpclientSep 2, 2020

  • CVE-2021-0340
    36Monitor

    In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation.

    HighCVSS 8.8Proof of conceptEPSS 2%

    google · androidFeb 10, 2021

  • CVE-2022-2818
    36Monitor

    Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit

    HighCVSS 8.8No exploitEPSS 1%

    agentejo · cockpitAug 15, 2022

  • CVE-2020-11684
    36Monitor

    AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged

    CriticalCVSS 9.1No exploitEPSS 1%

    linux4sam · at91bootstrapSep 14, 2020

  • CVE-2019-13402
    35Monitor

    /usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incompl

    HighCVSS 8.8No exploitEPSS 1%

    fortinet · fcm-mb40 firmwareJul 7, 2019

  • CVE-2022-30617
    35Monitor

    An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and password reset tokens, fo

    HighCVSS 8.8No exploitEPSS 1%

    strapi · strapiMay 19, 2022

  • CVE-2026-39937
    35Monitor

    Global vanishing does not completely remove user email

    HighCVSS 8.8No exploitEPSS 0%

    the wikimedia foundation · mediawiki - centralauth extensionApr 7, 2026

  • CVE-2026-85094
    35Monitor

    The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.

    HighCVSS 8.8No exploitEPSS 0%

    canva · canvaSep 4, 2026

  • CVE-2026-27640
    34Monitor

    tfplan2md has Sensitive Value Exposure in Generated Reports

    HighCVSS 8.5No exploitEPSS 0%

    oocx · tfplan2mdFeb 25, 2026

  • CVE-2024-43384
    32Monitor

    Phoenix Contact: Improper removal of sensitive information in MGUARD products

    HighCVSS 8.0No exploitEPSS 0%

    phoenixcontact · fl mguard 2102 firmwareMay 7, 2026

  • CVE-2025-65965
    32Monitor

    Grype has a credential disclosure vulnerability in Grype JSON output

    HighCVSS 8.2No exploitEPSS 0%

    anchore · grypeNov 25, 2025

  • CVE-2020-1940
    31Monitor

    The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensit

    HighCVSS 7.5No exploitEPSS 4%

    apache · jackrabbit oakJan 28, 2020

  • CVE-2002-0704
    31Monitor

    The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error m

    HighCVSS 7.5No exploitEPSS 3%

    linux · linux kernelJul 26, 2002

  • CVE-2022-0355
    31Monitor

    Improper Removal of Sensitive Information Before Storage or Transfer in feross/simple-get

    HighCVSS 7.5No exploitEPSS 2%

    simple-get project · simple-getJan 26, 2022

  • CVE-2019-20637
    31Monitor

    An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1.

    HighCVSS 7.5No exploitEPSS 1%

    varnish-cache · varnish cacheApr 8, 2020

  • CVE-2018-6337
    31Monitor

    folly::secureRandom will re-use a buffer between parent and child processes when fork() is called.

    HighCVSS 7.5No exploitEPSS 1%

    facebook · follyDec 31, 2018

  • CVE-2020-36476
    30Monitor

    An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS).

    HighCVSS 7.5No exploitEPSS 1%

    arm · mbed tlsAug 22, 2021

  • CVE-2022-24798
    30Monitor

    Insufficient password hash filtering in some IRRd queries and exports

    HighCVSS 7.5No exploitEPSS 1%

    internet routing registry daemon project · internet routing registry daemonMar 31, 2022

  • CVE-2024-49997
    30Monitor

    net: ethernet: lantiq_etop: fix memory disclosure

    HighCVSS 7.5No exploitEPSS 1%

    linux · linux kernelOct 21, 2024

  • CVE-2021-31780
    30Monitor

    In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit.

    HighCVSS 7.5No exploitEPSS 1%

    misp-project · mispApr 23, 2021

  • CVE-2022-30618
    30Monitor

    An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and password reset tokens, fo

    HighCVSS 7.5No exploitEPSS 0%

    strapi · strapiMay 19, 2022

  • CVE-2021-46813
    30Monitor

    Vulnerability of residual files not being deleted after an update in the ChinaDRM module.

    HighCVSS 7.5No exploitEPSS 0%

    huawei · emuiJun 13, 2022

  • CVE-2022-3460
    30Monitor

    In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed

    HighCVSS 7.5No exploitEPSS 0%

    octopus · octopus serverJan 2, 2023

All vulnerability classes