CWE-214
44 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 44Published CVEs44 of them scored
- 27Last 12 monthspublished in the last year
- 0Critical11 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103682
Jolokia special agent exposes password in process list
Checkmk GmbH · Checkmk
Low2.0 - CVE-2026-103674
NetApp ONTAP special agent exposes password in process list
Checkmk GmbH · Checkmk
Low2.0 - CVE-2026-121745
nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line
nvm-sh · nvm
Low2.0 - CVE-2026-116246
pgAdmin 4: Server passwords are left in pgAdmin's process environment
pgadmin.org · pgAdmin 4
High7.0 - CVE-2026-119117
Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
AWS · amazon-kinesis-producer
High8.2 - CVE-2026-92171
Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store
Red Hat · Red Hat Data Grid 8
Medium6.5 - CVE-2026-113496
Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments
Red Hat · Red Hat Enterprise Linux 10
Medium5.0 - CVE-2026-113495
Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments
Red Hat · Red Hat Enterprise Linux 10
Medium5.0 - CVE-2026-109971
Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool
Red Hat · Red Hat Enterprise Linux 10
Medium4.7 - CVE-2026-102371
wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments
Canonical · Ubuntu Pro for WSL
Medium5.7