CWE-315 · 7 records

Cleartext Storage of Sensitive Information in a Cookie

CVEs in this class

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2024-8644No exploit	Cleartext Storage of Sensitive Information in Oceanic Software's ValeAppoceanicsoft · valeapp · CWE-315 Pre-auth	Critical9.3	—	0.2%	Sep 27, 2024
36Monitor	CVE-2026-25818No exploit	HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 haCWE-315 Pre-auth	Critical9.1	—	0.1%	Mar 13, 2026
32Monitor	CVE-2024-41290Proof of concept	FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.flatpress · flatpress · CWE-315	High8.1	—	0.4%	Oct 2, 2024
30Monitor	CVE-2018-19941No exploit	Cleartext Storage of Sensitive Information in Cookiesqnap · qts · CWE-315 Pre-auth	High7.5	—	0.6%	Dec 31, 2020
30Monitor	CVE-2024-24768No exploit	1Panel set-cookie is missing the Secure keywordfit2cloud · 1panel · CWE-315 Pre-auth	High7.5	—	0.3%	Feb 5, 2024
22Monitor	CVE-2021-34564No exploit	In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookiepepperl-fuchs · wha-gw-f2d2-0-as-z2-eth firmware · CWE-315	Medium5.5	—	0.1%	Aug 31, 2021
12Monitor	GHSA-j4g3-3q8x-jxqpNo exploit	dbt-core's secret env vars written to package-lock.json in plaintextPyPI · dbt-core · CWE-315	Low3.2	—	—	Dec 8, 2023

CVE-2024-8644
37Monitor
Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
oceanicsoft · valeappSep 27, 2024
CVE-2026-25818
36Monitor
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 ha
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
Mar 13, 2026
CVE-2024-41290
32Monitor
FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.
HighCVSS 8.1Proof of conceptEPSS 0%
flatpress · flatpressOct 2, 2024
CVE-2018-19941
30Monitor
Cleartext Storage of Sensitive Information in Cookies
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
qnap · qtsDec 31, 2020
CVE-2024-24768
30Monitor
1Panel set-cookie is missing the Secure keyword
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
fit2cloud · 1panelFeb 5, 2024
CVE-2021-34564
22Monitor
In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie
MediumCVSS 5.5No exploitEPSS 0%
pepperl-fuchs · wha-gw-f2d2-0-as-z2-eth firmwareAug 31, 2021
GHSA-j4g3-3q8x-jxqp
12Monitor
dbt-core's secret env vars written to package-lock.json in plaintext
LowCVSS 3.2No exploit
PyPI · dbt-coreDec 8, 2023