Skip to content
Noroxi

CWE-313 · 23 records

Cleartext Storage in a File or on Disk

CVEs in this class

23 records

  • CVE-2016-6538
    35Monitor

    TrackR Bravo mobile application stores account passwords in cleartext

    HighCVSS 8.8No exploitEPSS 1%

    thetrackr · trackr bravo firmwareJul 6, 2018

  • CVE-2024-20448
    34Monitor

    Cisco Nexus Dashboard Fabric Controller Credential Information Disclosure Vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    cisco · nexus dashboard fabric controllerOct 2, 2024

  • CVE-2026-52783
    32Monitor

    OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive D

    HighCVSS 8.2No exploitEPSS 0%

    opf · openprojectJun 26, 2026

  • CVE-2026-24349
    32Monitor

    A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versio

    HighCVSS 8.2No exploitEPSS 0%

    siemens · simatic wincc unified pc runtimeJun 9, 2026

  • CVE-2016-6547
    31Monitor

    Zizai Tech Nut stores the account password in cleartext

    HighCVSS 7.8No exploitEPSS 0%

    nutspace · nut mobileJul 13, 2018

  • CVE-2016-6546
    31Monitor

    iTrack Easy mobile application stores the user password in base-64 encoding/cleartext

    HighCVSS 7.8No exploitEPSS 0%

    kkmcn · itrackeasyJul 13, 2018

  • CVE-2024-38280
    28Monitor

    Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

    HighCVSS 7.0No exploitEPSS 0%

    motorola · vigilant fixed lpr coms box firmwareJun 13, 2024

  • CVE-2025-64305
    28Monitor

    Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk

    HighCVSS 7.1No exploitEPSS 0%

    columbia weather systems · microserverJan 7, 2026

  • CVE-2025-4397
    27Monitor

    Medtronic MyCareLink Patient Monitor Data Encryption Weakness

    MediumCVSS 6.8No exploitEPSS 0%

    medtronic · mycarelink patient monitor 24950May 7, 2026

  • CVE-2024-6785
    27Monitor

    MXview One and MXview One Central Manager Series store cleartext credentials in a local file

    MediumCVSS 6.8No exploitEPSS 0%

    moxa · mxview oneSep 21, 2024

  • CVE-2024-30406
    26Monitor

    Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials

    MediumCVSS 6.7No exploitEPSS 0%

    juniper · paragon active assurance test agentApr 12, 2024

  • CVE-2026-14663
    26Monitor

    PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext

    MediumCVSS 6.5No exploitEPSS 0%

    postgresql · postgresqlAug 13, 2026

  • CVE-2024-5916
    24Monitor

    PAN-OS: Cleartext Exposure of External System Secrets

    MediumCVSS 6.0No exploitEPSS 0%

    paloaltonetworks · pan-osAug 14, 2024

  • CVE-2025-36154
    24Monitor

    IBM Concert Software Cleartext Storage in a File or on Disk.

    MediumCVSS 6.2No exploitEPSS 0%

    ibm · concertDec 24, 2025

  • CVE-2023-2863
    22Monitor

    Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk

    MediumCVSS 5.5No exploitEPSS 0%

    simpledesign · diary with lock\May 24, 2023

  • CVE-2023-4066
    22Monitor

    Operator: passwords defined in secrets shown in statefulset yaml

    MediumCVSS 5.5No exploitEPSS 0%

    redhat · jboss a-mqSep 27, 2023

  • CVE-2023-0114
    22Monitor

    Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on disk

    MediumCVSS 5.5No exploitEPSS 0%

    netis-systems · netcore router firmwareJan 7, 2023

  • CVE-2026-5769
    22Monitor

    A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory sw

    MediumCVSS 5.6No exploitEPSS 0%

    broadcom · brocade sannavOct 8, 2026

  • CVE-2019-19291
    21Monitor

    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0)

    MediumCVSS 5.3No exploitEPSS 0%

    siemens · sinvr 3 central control serverMar 10, 2020

  • CVE-2018-10622
    20Monitor

    Medtronic MyCareLink Patient Monitor Network Credential Weakness

    MediumCVSS 5.2No exploitEPSS 0%

    medtronic · mycarelink 24952 patient monitor firmwareAug 10, 2018

  • CVE-2023-35699
    18Monitor

    Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive

    MediumCVSS 4.6No exploitEPSS 0%

    sick · icr890-4 firmwareJul 10, 2023

  • CVE-2024-9040
    18Monitor

    code-projects Blood Bank Management System Password cleartext storage in a file or on disk

    MediumCVSS 4.6No exploitEPSS 0%

    code-projects · blood bank management systemSep 20, 2024

  • CVE-2024-49762
    18Monitor

    Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled

    MediumCVSS 4.6No exploitEPSS 0%

    pterodactyl · panelOct 24, 2024

All vulnerability classes