CWE-540 · 29 records

Inclusion of Sensitive Information in Source Code

CVEs in this class

29 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-49182No exploit	Credential disclosuresick · media server · CWE-540 Pre-auth	Critical9.8	—	0.6%	Jun 12, 2025
39Monitor	CVE-2026-84390No exploit	A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7fortinet · fortimonitoronsight · CWE-540 Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2024-38327No exploit	IBM Analytics Content Hub information disclosureibm · analytics content hub · CWE-540 Pre-auth	Critical9.8	—	0.3%	Jul 10, 2025
32Monitor	CVE-2025-26013No exploit	An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.olajowon · loggrove · CWE-540 Pre-auth	High8.2	—	0.4%	Feb 21, 2025
30Monitor	CVE-2024-2265No exploit	keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source codekeerti1924 · php mysql user signup login system · CWE-540 Pre-auth	High7.5	—	0.8%	Mar 7, 2024
30Monitor	CVE-2026-4155No exploit	ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerabilitychargepoint · home flex cph50 firmware · CWE-540 Pre-auth	High7.5	—	0.7%	Apr 10, 2026
30Monitor	CVE-2024-1272No exploit	Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit Softwaretnbmobil · cockpit · CWE-540 Pre-auth	High7.5	—	0.4%	Jun 5, 2024
30Monitor	CVE-2026-73591No exploit	Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Coddell · policy manager for secure connect gateway · CWE-540 Pre-auth	High7.5	—	0.3%	Sep 23, 2026
27Monitor	CVE-2026-35383No exploit	Bentley Systems iTwin Platform exposed access tokenbentley systems · itwin platform · CWE-540 Pre-auth	Medium6.9	—	0.5%	Apr 2, 2026
27Monitor	CVE-2026-16581No exploit	Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Applicationigloohome · smart lock mobile application · CWE-540 Pre-auth	Medium6.9	—	0.4%	Jul 28, 2026
26Monitor	CVE-2021-1516No exploit	Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerabilitycisco · content security management appliance · CWE-540	Medium6.5	—	1.0%	May 6, 2021
22Monitor	CVE-2021-34757No exploit	Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilitiescisco · business 220-8t-e-2g firmware · CWE-540	Medium5.5	—	0.6%	Oct 6, 2021
22Monitor	CVE-2021-28805No exploit	Inclusion of Sensitive Information in QSSqnap · qss · CWE-540	Medium5.5	—	0.2%	Jun 11, 2021
22Monitor	CVE-2023-39250No exploit	Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Managdell · replay manager for vmware · CWE-540 Local privilege escalation	Medium5.5	—	0.1%	Aug 16, 2023
21Monitor	CVE-2023-23448No exploit	Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116,sick · ftmg-esd20axx firmware · CWE-540 Pre-auth	Medium5.3	—	0.8%	May 15, 2023
21Monitor	CVE-2023-30802No exploit	Sangfor Next-Gen Application Firewall Source Code Disclosuresangfor · next-gen application firewall · CWE-540 Pre-auth	Medium5.3	—	0.6%	Oct 10, 2023
21Monitor	CVE-2024-9596No exploit	Inclusion of Sensitive Information in Source Code in GitLabgitlab · gitlab · CWE-540 Pre-auth	Medium5.3	—	0.3%	Oct 10, 2024
21Monitor	CVE-2024-35144No exploit	IBM Maximo Application Suite information disclosureibm · maximo application suite · CWE-540 Pre-auth	Medium5.3	—	0.3%	Jan 25, 2025
21Monitor	CVE-2025-0923No exploit	IBM Cognos Analytics information disclosureibm · cognos analytics · CWE-540 Pre-auth	Medium5.3	—	0.3%	Jun 11, 2025
21Monitor	CVE-2024-55907No exploit	IBM Cognos Mobile information disclosureibm · cognos analytics mobile · CWE-540 Pre-auth	Medium5.3	—	0.3%	Mar 2, 2025
19Monitor	CVE-2021-34744No exploit	Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilitiescisco · business 220-8t-e-2g firmware · CWE-540	Medium4.9	—	0.7%	Oct 6, 2021
17Monitor	CVE-2024-39729No exploit	IBM Datacap Navigator information disclosureibm · datacap · CWE-540	Medium4.3	—	0.4%	Jul 14, 2024
17Monitor	CVE-2024-27257No exploit	IBM OpenPages information disclosureibm · openpages grc platform · CWE-540	Medium4.3	—	0.3%	Sep 10, 2024
17Monitor	CVE-2025-36076No exploit	IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilitiesibm · cognos analytics · CWE-540	Medium4.3	—	0.2%	Sep 18, 2026
17Monitor	CVE-2025-36299No exploit	IBM Planning Analytics Information Disclosureibm · planning analytics local · CWE-540	Medium4.3	—	0.2%	Nov 17, 2025

CVE-2025-49182
39Monitor
Credential disclosure
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
sick · media serverJun 12, 2025
CVE-2026-84390
39Monitor
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
fortinet · fortimonitoronsightSep 11, 2026
CVE-2024-38327
39Monitor
IBM Analytics Content Hub information disclosure
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ibm · analytics content hubJul 10, 2025
CVE-2025-26013
32Monitor
An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
olajowon · loggroveFeb 21, 2025
CVE-2024-2265
30Monitor
keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
keerti1924 · php mysql user signup login systemMar 7, 2024
CVE-2026-4155
30Monitor
ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
chargepoint · home flex cph50 firmwareApr 10, 2026
CVE-2024-1272
30Monitor
Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit Software
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
tnbmobil · cockpitJun 5, 2024
CVE-2026-73591
30Monitor
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Cod
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
dell · policy manager for secure connect gatewaySep 23, 2026
CVE-2026-35383
27Monitor
Bentley Systems iTwin Platform exposed access token
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
bentley systems · itwin platformApr 2, 2026
CVE-2026-16581
27Monitor
Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
igloohome · smart lock mobile applicationJul 28, 2026
CVE-2021-1516
26Monitor
Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability
MediumCVSS 6.5No exploitEPSS 1%
cisco · content security management applianceMay 6, 2021
CVE-2021-34757
22Monitor
Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
MediumCVSS 5.5No exploitEPSS 1%
cisco · business 220-8t-e-2g firmwareOct 6, 2021
CVE-2021-28805
22Monitor
Inclusion of Sensitive Information in QSS
MediumCVSS 5.5No exploitEPSS 0%
qnap · qssJun 11, 2021
CVE-2023-39250
22Monitor
Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manag
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
dell · replay manager for vmwareAug 16, 2023
CVE-2023-23448
21Monitor
Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116,
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
sick · ftmg-esd20axx firmwareMay 15, 2023
CVE-2023-30802
21Monitor
Sangfor Next-Gen Application Firewall Source Code Disclosure
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
sangfor · next-gen application firewallOct 10, 2023
CVE-2024-9596
21Monitor
Inclusion of Sensitive Information in Source Code in GitLab
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
gitlab · gitlabOct 10, 2024
CVE-2024-35144
21Monitor
IBM Maximo Application Suite information disclosure
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
ibm · maximo application suiteJan 25, 2025
CVE-2025-0923
21Monitor
IBM Cognos Analytics information disclosure
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
ibm · cognos analyticsJun 11, 2025
CVE-2024-55907
21Monitor
IBM Cognos Mobile information disclosure
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
ibm · cognos analytics mobileMar 2, 2025
CVE-2021-34744
19Monitor
Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
MediumCVSS 4.9No exploitEPSS 1%
cisco · business 220-8t-e-2g firmwareOct 6, 2021
CVE-2024-39729
17Monitor
IBM Datacap Navigator information disclosure
MediumCVSS 4.3No exploitEPSS 0%
ibm · datacapJul 14, 2024
CVE-2024-27257
17Monitor
IBM OpenPages information disclosure
MediumCVSS 4.3No exploitEPSS 0%
ibm · openpages grc platformSep 10, 2024
CVE-2025-36076
17Monitor
IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
MediumCVSS 4.3No exploitEPSS 0%
ibm · cognos analyticsSep 18, 2026
CVE-2025-36299
17Monitor
IBM Planning Analytics Information Disclosure
MediumCVSS 4.3No exploitEPSS 0%
ibm · planning analytics localNov 17, 2025

All vulnerability classes