CWE-256

High likelihood

Plaintext Storage of a Password

Parent: CWE-522 - Insufficiently Protected Credentials

The product stores a password in plaintext within resources such as memory or files.

204 vulnerabilities with CWE-256
CVE-2024-55026 CRITICAL
Weintek cMT-3072XH2 v2.1.53 - Command Injection
CVSS 9.8
CVE-2024-42197 MEDIUM
HCL Workload Scheduler - Info Disclosure
CVSS 5.5
CVE-2024-43186 MEDIUM
IBM InfoSphere Information Server 11.7 - Info Disclosure
CVSS 5.3
CVE-2024-9418 MEDIUM
transformeroptimus/superagi <0.0.14 - Info Disclosure
CVSS 6.5
CVE-2024-45638 MEDIUM
IBM Security QRadar 3.12 EDR - Info Disclosure
CVSS 4.1
CVE-2024-41336 HIGH
Draytek Vigor Routers - Plaintext Storage of Passwords
CVSS 7.5
CVE-2024-10334 HIGH
ABB System 800xA 5.1.x 6.0.3.x 6.1.1.x 6.2.x - Video Feed Manipulation via VideONet
CVSS 7.3
CVE-2024-43659 HIGH
Iocharger AC <25010801 - Info Disclosure
CVSS 7.2
CVE-2024-52361 MEDIUM
IBM Storage Defender - Resiliency Service <2.0.10 - Info Disclosure
CVSS 5.7
CVE-2024-53292 HIGH
Dell VxVerify <x.40.405 - Info Disclosure
CVSS 7.2
CVE-2024-11982 HIGH
Billion Electric Router - Info Disclosure
CVSS 7.2
CVE-2024-36464 LOW
Media Type Export - Info Disclosure
CVSS 2.7
CVE-2024-29978 MEDIUM
Product with vulnerability - Info Disclosure
CVSS 5.9
CVE-2024-49351 MEDIUM
IBM Workload Scheduler <10.3 - Info Disclosure
CVSS 5.5
CVE-2024-49370 MEDIUM
Pimcore <4.1.7, <3.1.16 - Info Disclosure
CVSS 4.9
CVE-2024-42496 LOW
Smart-tab Android <April 2023 - Info Disclosure
CVSS 2.4
CVE-2024-31899 MEDIUM
IBM Cognos Command Center <10.2.5 - Info Disclosure
CVSS 4.3
CVE-2024-5960 CRITICAL
Eliz Software Panel <2.3.24 - Info Disclosure
CVSS 9.8
CVE-2024-20489 HIGH
Cisco IOS XR - Authenticated MongoDB Credential Exposure via PON Controller Configuration File
CVSS 8.4
CVE-2024-44815 MEDIUM
Hathway Skyworth Router CM5100 <4.1.1.24 - Info Disclosure
CVSS 4.6
CVE-2024-45283 MEDIUM
SAP NetWeaver AS for Java - Info Disclosure
CVSS 6.0
CVE-2024-43378 HIGH
calamares-nixos-extensions - Info Disclosure
CVSS 7.8
CVE-2024-25024 MEDIUM
IBM QRadar Suite Software <1.10.23.0 & Cloud Pak for Security <1.10...
CVSS 5.5
CVE-2024-39922 MEDIUM
Siemens LOGO! and SIPLUS LOGO! - Plaintext Password Storage
CVSS 4.6
CVE-2024-36460 HIGH
Zabbix - Plaintext Password Disclosure in Front-End Audit Log
CVSS 8.1
Details
Vulnerabilities 204
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits