Skip to content
Noroxi

CWE-214 · 32 records

Invocation of Process Using Visible Sensitive Information

CVEs in this class

32 records

  • CVE-2026-74873
    34Monitor

    openssl_encrypt before 1.4.0 Password Exposure via CLI Argument

    HighCVSS 8.7No exploitEPSS 0%

    jahlives · openssl encryptAug 17, 2026

  • CVE-2021-3859
    31Monitor

    A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2.

    HighCVSS 7.5No exploitEPSS 1%

    redhat · jboss enterprise application platformAug 26, 2022

  • CVE-2020-36771
    31Monitor

    CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument.

    HighCVSS 7.8No exploitEPSS 0%

    cloudlinux · cagefsJan 22, 2024

  • CVE-2018-17957
    31Monitor

    yast2-rmt leaks database passwords in process list

    HighCVSS 7.8No exploitEPSS 0%

    suse · repository mirroring toolDec 26, 2018

  • CVE-2018-16837
    31Monitor

    Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen.

    HighCVSS 7.8No exploitEPSS 0%

    redhat · ansible engineOct 23, 2018

  • CVE-2026-12250
    31Monitor

    Sensitive Data Exposure in TUBITAK BILGEM's Pardus Domain Joiner

    HighCVSS 7.9No exploitEPSS 0%

    tubitak bilgem software technologies research institute · pardus domain joinerJul 5, 2026

  • CVE-2024-28799
    30Monitor

    IBM QRadar Suite Software information disclosure

    HighCVSS 7.5No exploitEPSS 0%

    ibm · cloud pak for securityAug 14, 2024

  • CVE-2019-3869
    28Monitor

    When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variabl

    HighCVSS 7.2No exploitEPSS 1%

    redhat · ansible towerMar 28, 2019

  • CVE-2024-4254
    28Monitor

    Secrets Exfiltration in gradio-app/gradio

    HighCVSS 7.1Proof of conceptEPSS 0%

    gradio project · gradioJun 4, 2024

  • CVE-2026-76054
    28Monitor

    Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute

    HighCVSS 7.1No exploitEPSS 0%

    black duck · blackduck-c-cppAug 24, 2026

  • CVE-2026-81684
    27Monitor

    openssl_encrypt before 1.4.9 Information Disclosure via Command Line

    MediumCVSS 6.9No exploitEPSS 0%

    jahlives · openssl encryptAug 27, 2026

  • CVE-2020-5422
    26Monitor

    UAA password may appear in BOSH System Metrics Server process arguments

    MediumCVSS 6.5No exploitEPSS 0%

    cloud foundry · bosh system metrics serverOct 2, 2020

  • CVE-2025-5452
    26Monitor

    A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to pot

    MediumCVSS 6.6No exploitEPSS 0%

    axis · axis osNov 11, 2025

  • CVE-2025-1333
    26Monitor

    IBM MQ Operator information disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    ibm · mq operatorMay 1, 2025

  • CVE-2026-61670
    26Monitor

    microsandbox: Secret values exposed in world-readable process arguments

    MediumCVSS 6.5No exploitEPSS 0%

    superradcompany · microsandboxSep 18, 2026

  • CVE-2025-32987
    24Monitor

    Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in

    MediumCVSS 6.0No exploitEPSS 0%

    arctera · ediscovery platformApr 14, 2025

  • CVE-2026-65088
    22Monitor

    NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information.

    MediumCVSS 5.5No exploitEPSS 0%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-92768
    22Monitor

    Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments

    MediumCVSS 5.5No exploitEPSS 0%

    red hat · red hat enterprise linux 10Sep 18, 2026

  • CVE-2026-12139
    22Monitor

    Tanium addressed an information disclosure vulnerability in Connect.

    MediumCVSS 5.5No exploitEPSS 0%

    tanium · connectJul 21, 2026

  • CVE-2026-80158
    22Monitor

    Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs an

    MediumCVSS 5.5No exploitEPSS 0%

    red hat · red hat ceph storage 5Aug 26, 2026

  • CVE-2026-9494
    22Monitor

    ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line

    MediumCVSS 5.5No exploitEPSS 0%

    canonical · ubuntu-pro-client (ubuntu-advantage-tools)Jul 16, 2026

  • CVE-2025-53860
    22Monitor

    F5OS-A FIPS HSM vulnerability

    MediumCVSS 5.6No exploitEPSS 0%

    f5 · f5os-aOct 15, 2025

  • CVE-2026-102371
    22Monitor

    wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments

    MediumCVSS 5.7No exploitEPSS 0%

    canonical · ubuntu pro for wslSep 29, 2026

  • CVE-2026-92747
    20Monitor

    Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list

    MediumCVSS 5.0No exploitEPSS 0%

    red hat · red hat enterprise linux 10Sep 18, 2026

  • CVE-2026-113495
    20Monitor

    Cockpit-machines: rhsm access-token disclosure through image helper command-line arguments

    MediumCVSS 5.0No exploitEPSS 0%

    red hat · red hat enterprise linux 105 days ago

All vulnerability classes