CWE-922

Insecure Storage of Sensitive Information

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

373 vulnerabilities with CWE-922
CVE-2024-56957 MEDIUM
Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0...
CVSS 6.5
CVE-2024-56955 MEDIUM
Tencent Technology (Shenzhen) Company Limited QQMail <6.6.4 - Info ...
CVSS 6.5
CVE-2024-56954 MEDIUM
Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video <7.70...
CVSS 6.5
CVE-2024-56953 MEDIUM
Baidu Input Method <12.6.13 - Info Disclosure
CVSS 6.5
CVE-2024-56952 MEDIUM
Baidu Lite <6.40.0 - Info Disclosure
CVSS 6.5
CVE-2024-56951 MEDIUM
Hangzhou Bobo Technology Co Ltd UU Game Booster <10.6.13 - Info Dis...
CVSS 6.5
CVE-2024-56950 MEDIUM
KuGou Concept <4.0.61 - Info Disclosure
CVSS 6.5
CVE-2024-56949 MEDIUM
University Search iOS <2.27.0 - Info Disclosure
CVSS 6.5
CVE-2024-56948 MEDIUM
KuGou Music iOS <20.0.0 - Info Disclosure
CVSS 6.5
CVE-2024-56947 MEDIUM
BeautyCam iOS <12.3.60 - Info Disclosure
CVSS 6.5
CVE-2024-55931 MEDIUM
Xerox Workplace Suite - Info Disclosure
CVSS 6.5
CVE-2024-48883 MEDIUM
Samsung Exynos Modem and Processor Firmware - Information Disclosure via Malformed Uplink Scheduling Message
CVSS 4.3
CVE-2024-56113 HIGH
Smart Toilet Lab - Motius <1.3.11 - Info Disclosure
CVSS 7.5
CVE-2024-53932 CRITICAL
Color Phone: Call Screen Theme <21.1.9 - RCE
CVSS 9.1
CVE-2024-53931 CRITICAL
com.glitter.caller.screen <1.1 - RCE
CVSS 9.1
CVE-2024-44298 LOW
macOS Sequoia <15.1 - Info Disclosure
CVSS 3.3
CVE-2024-44292 MEDIUM
macOS Sequoia <15.1 - Info Disclosure
CVSS 5.5
CVE-2024-49201 MEDIUM
Keyfactor Remote File Orchestrator <2.8.1 - Info Disclosure
CVSS 4.3
CVE-2024-4995 CRITICAL
Wapro ERP Desktop <9.00.0. - Info Disclosure
CVSS 9.8
CVE-2024-54504 MEDIUM
macOS Sequoia <15.2 - Info Disclosure
CVSS 5.5
CVE-2024-54485 LOW
iPadOS < 17.7.3 and < 18.2 - Unauthenticated Sensitive Information Exposure via Lock Screen Notifications
CVSS 2.4
CVE-2024-54477 MEDIUM
macOS < 13.7.2, < 14.7.2, < 15.2 - Unprotected User Data Exposure
CVSS 5.5
CVE-2024-44200 LOW
iPadOS < 18.1 - Unprotected User Data Exposure via Sensitive Location Information
CVSS 3.3
CVE-2024-37144 HIGH
Dell PowerFlex and InsightIQ - Insecure Storage of Sensitive Information
CVSS 8.2
CVE-2024-47043 HIGH
Ruijie Reyee OS <2.320 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities 373
Links
MITRE CWE Entry Search this CWE With Exploits