CWE-549
16 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 16Published CVEs16 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-3314
Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint
Hitachi · Hitachi Ops Center Analyzer
Medium4.6 - CVE-2025-13175
Insecure Password Storage in Y Soft SafeQ 6
YSoft · SafeQ 6
Medium5.1 - CVE-2025-42904
Information Disclosure vulnerability in Application Server ABAP
SAP_SE · Application Server ABAP
Medium6.5 - CVE-2025-64170
sudo-rs: Partial password reveal is possible after timeout
trifectatechfoundation · sudo-rs
Low3.8 - CVE-2025-4526
Dígitro NGC Explorer Configuration missing password field masking
Dígitro · NGC Explorer
Medium5.3 - CVE-2025-31728
Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for…
Jenkins Project · Jenkins AsakusaSatellite Plugin
Medium5.5 - CVE-2025-31727
Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can…
Jenkins Project · Jenkins AsakusaSatellite Plugin
Medium5.5 - CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe…
Jenkins Project · Jenkins Zoho QEngine Plugin
Low3.1 - CVE-2025-0148
Zoom Jenkins Marketplace plugin - Missing Password Field Masking
Zoom Communications, Inc · Zoom Jenkins Marketplace plugin
Low2.6 - CVE-2024-10122
Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking
Topdata · Inner Rep Plus WebServer
Medium5.1