CWE-316
43 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 43Published CVEs43 of them scored
- 15Last 12 monthspublished in the last year
- 2Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-106022
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded…
Johnson Controls · EasyIO Neo IOManager and Tools Installer
High8.6 - CVE-2026-71455
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue…
Johnson Controls · Kantech Entrapass
Medium5.3 - CVE-2026-77407
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields
rabbitmq · amqp091-go
High7.0 - CVE-2025-56565
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory.…
Product not named
High7.6 - CVE-2026-53604
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
forgekeep · nebula-mesh
High7.1 - CVE-2026-75137
UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after Lock
Septeo IT Solutions · UpSignOn
Medium6.9 - CVE-2026-75135
UpSignOn < 7.19.0 Sensitive Key Retention in Memory
Septeo IT Solutions · UpSignOn
Medium6.9 - CVE-2026-27875
Simplex Incident Manager Clear Test
Johnson Controls · Simplex Incident Manager / Autocall Fire Administrator
Medium6.9 - CVE-2026-8636
Multiple Vulnerabilities in IBM Datacap
IBM · Datacap
Medium5.5 - CVE-2026-24319
Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)
SAP_SE · SAP Business One (B1 Client Memory Dump Files)
Medium5.8