Skip to content
Noroxi

CWE-316 · 40 records

Cleartext Storage of Sensitive Information in Memory

CVEs in this class

40 records

  • CVE-2025-52579
    37Monitor

    Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

    CriticalCVSS 9.3No exploitEPSS 0%

    emerson · valvelink soloJul 10, 2025

  • CVE-2025-50109
    34Monitor

    Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

    HighCVSS 8.5No exploitEPSS 0%

    emerson · valvelink soloJul 10, 2025

  • CVE-2024-36792
    32Monitor

    An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's p

    HighCVSS 8.2No exploitEPSS 0%

    netgear · wnr614 firmwareJun 7, 2024

  • CVE-2023-3762
    30Monitor

    Intergard SGS sensitive information in memory

    HighCVSS 7.5No exploitEPSS 0%

    intergard · smartgard silver with matrix keyboardJul 19, 2023

  • CVE-2023-44153
    30Monitor

    Sensitive information disclosure due to cleartext storage of sensitive information in memory.

    HighCVSS 7.5No exploitEPSS 0%

    acronis · cyber protectSep 27, 2023

  • CVE-2026-8636
    30Monitor

    Multiple Vulnerabilities in IBM Datacap

    HighCVSS 7.5No exploitEPSS 0%

    ibm · datacapJun 22, 2026

  • CVE-2024-39732
    30Monitor

    IBM Datacap Navigator information disclosure

    HighCVSS 7.5No exploitEPSS 0%

    ibm · datacapJul 14, 2024

  • CVE-2023-40724
    29Monitor

    A vulnerability has been identified in QMS Automotive (All versions < V12.39).

    HighCVSS 7.3No exploitEPSS 0%

    siemens · qms automotiveSep 12, 2023

  • CVE-2024-24915
    28Monitor

    SmartConsole Sensitive Credential Exposure via Memory Dump

    HighCVSS 7.2No exploitEPSS 0%

    checkpoint · smartconsoleJun 29, 2025

  • CVE-2026-77407
    28Monitor

    RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

    HighCVSS 7.0No exploitEPSS 0%

    rabbitmq · amqp091-goSep 16, 2026

  • CVE-2026-75137
    27Monitor

    UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after Lock

    MediumCVSS 6.9No exploitEPSS 0%

    septeo it solutions · upsignonSep 2, 2026

  • CVE-2026-75135
    27Monitor

    UpSignOn < 7.19.0 Sensitive Key Retention in Memory

    MediumCVSS 6.9No exploitEPSS 0%

    septeo it solutions · upsignonSep 2, 2026

  • CVE-2026-27875
    27Monitor

    Simplex Incident Manager Clear Test

    MediumCVSS 6.9No exploitEPSS 0%

    johnson controls · simplex incident manager / autocall fire administratorAug 21, 2026

  • CVE-2024-33901
    26Monitor

    Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database vi

    MediumCVSS 6.5Proof of conceptEPSS 0%

    keepassxc · keepassxcMay 20, 2024

  • CVE-2022-29832
    26Monitor

    Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, G

    MediumCVSS 6.5No exploitEPSS 0%

    mitsubishielectric · gx works3Nov 24, 2022

  • CVE-2024-33900
    26Monitor

    KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump.

    MediumCVSS 6.5No exploitEPSS 0%

    keepassxc · keepassxcMay 20, 2024

  • CVE-2025-60794
    26Monitor

    Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/use

    MediumCVSS 6.5No exploitEPSS 0%

    perfood · couchauthNov 20, 2025

  • CVE-2024-49800
    26Monitor

    IBM ApplinX Information Disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    ibm · applinxFeb 5, 2025

  • CVE-2024-25649
    26Monitor

    In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the follo

    MediumCVSS 6.7No exploitEPSS 0%

    delinea · secret serverMar 13, 2024

  • CVE-2025-60791
    24Monitor

    Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory.

    MediumCVSS 6.2Proof of conceptEPSS 0%

    Oct 27, 2025

  • CVE-2026-24319
    23Monitor

    Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)

    MediumCVSS 5.8No exploitEPSS 0%

    sap · business oneFeb 10, 2026

  • CVE-2021-32942
    22Monitor

    The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authoriz

    MediumCVSS 5.5No exploitEPSS 0%

    aveva · intouch 2017Jun 9, 2021

  • CVE-2022-0835
    22Monitor

    AVEVA System Platform Cleartext Storage of Sensitive Information in Memory

    MediumCVSS 5.5No exploitEPSS 0%

    aveva · system platformApr 11, 2022

  • CVE-2022-46141
    22Monitor

    A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19).

    MediumCVSS 5.5No exploitEPSS 0%

    siemens · simatic step 7Dec 12, 2023

  • CVE-2022-33918
    22Monitor

    Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability.

    MediumCVSS 5.5No exploitEPSS 0%

    dell · geodriveOct 12, 2022

All vulnerability classes