# CWE-256. Every Advisory and CVE whose sources give the weakness CWE-256, newest first. ## Records, newest first (an older page) - [Plaintext password storage in Dell VxRail HCI](https://agentprime.io/advisories/CVE-2024-53292.md) `CVE-2024-53292` · CVE record: Dell Dell VxRail HCI · CVSS 7.2 High · Not analysed yet · Published 11 Dec 2024 · Tags: CWE-256 - [Billion Electric router - Plaintext Storage of a Password](https://agentprime.io/advisories/CVE-2024-11982.md) `CVE-2024-11982` · CVE record: Billion Electric M100 and 3 more · CVSS 7.2 High · Not analysed yet · Published 29 Nov 2024 · Tags: CWE-256 - [Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported](https://agentprime.io/advisories/CVE-2024-36464.md) `CVE-2024-36464` · CVE record: Zabbix Zabbix · CVSS 2.7 Low · Not analysed yet · Published 27 Nov 2024 · Tags: CWE-256 - [Plaintext password storage in Sharp Corporation Multiple MFPs (multifunction printers) and others](https://agentprime.io/advisories/CVE-2024-29978.md) `CVE-2024-29978` · CVE record: Sharp Corporation Multiple MFPs (multifunction printers) and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-256 - [IBM Workload Scheduler information disclosure](https://agentprime.io/advisories/CVE-2024-49351.md) `CVE-2024-49351` · CVE record: IBM Workload Scheduler · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-256 - [Change-Password via Portal-Profile sets PimcoreBackendUser password without hashing](https://agentprime.io/advisories/CVE-2024-49370.md) `CVE-2024-49370` · CVE record: pimcore pimcore · CVSS 8.7 High · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-256 - [Plaintext password storage in TECHNO SUPPORT COMPANY Smart-tab Android app](https://agentprime.io/advisories/CVE-2024-42496.md) `CVE-2024-42496` · CVE record: TECHNO SUPPORT COMPANY Smart-tab Android app · CVSS 2.4 Low · Not analysed yet · Published 30 Sept 2024 · Tags: CWE-256 - [IBM Cognos Command Center information disclosure](https://agentprime.io/advisories/CVE-2024-31899.md) `CVE-2024-31899` · CVE record: IBM Cognos Command Center · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-256 - [Plaintext Storage of a Password in Eliz Software's Panel](https://agentprime.io/advisories/CVE-2024-5960.md) `CVE-2024-5960` · CVE record: Eliz Software Panel · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2024 · Tags: CWE-256 - [Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.](https://agentprime.io/advisories/CVE-2023-41610.md) `CVE-2023-41610` · CVE record · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2024 · Tags: Hard-coded credentials, CWE-256 - [Cisco Routed Passive Optical Network Cleartext Password Vulnerability](https://agentprime.io/advisories/CVE-2024-20489.md) `CVE-2024-20489` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-256 - [Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)](https://agentprime.io/advisories/CVE-2024-45283.md) `CVE-2024-45283` · CVE record: SAP_SE SAP NetWeaver AS for Java (Destination Service) · CVSS 6.0 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-256 - [Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.](https://agentprime.io/advisories/CVE-2024-44815.md) `CVE-2024-44815` · CVE record · CVSS 8.0 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-256 - [calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems](https://agentprime.io/advisories/CVE-2024-43378.md) `CVE-2024-43378` · CVE record: NixOS calamares-nixos-extensions · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-256 - [IBM QRadar Suite Software information disclosure](https://agentprime.io/advisories/CVE-2024-25024.md) `CVE-2024-25024` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-256 - [Plaintext password storage in Siemens LOGO! 12/24RCE and others](https://agentprime.io/advisories/CVE-2024-39922.md) `CVE-2024-39922` · CVE record: Siemens LOGO! 12/24RCE and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-256 - [Front-end audit log shows passwords in plaintext](https://agentprime.io/advisories/CVE-2024-36460.md) `CVE-2024-36460` · CVE record: Zabbix Zabbix · CVSS 8.1 High · Not analysed yet · Published 9 Aug 2024 · Tags: CWE-256 - [Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password](https://agentprime.io/advisories/CVE-2024-6118.md) `CVE-2024-6118` · CVE record: Hamastar Technology MeetingHub Paperless Meetings · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-256 - [Plaintext password storage in Dell Data Manager Appliance Software (DMAS)](https://agentprime.io/advisories/CVE-2024-37135.md) `CVE-2024-37135` · CVE record: Dell Data Manager Appliance Software (DMAS) · CVSS 3.3 Low · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-256 - [Plaintext password storage in Plug&Track Sensor Net Connect V2](https://agentprime.io/advisories/CVE-2024-3082.md) `CVE-2024-3082` · CVE record: Plug&Track Sensor Net Connect V2 · CVSS 4.2 Medium · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-256 - [An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for S…](https://agentprime.io/advisories/CVE-2024-40116.md) `CVE-2024-40116` · CVE record · CVSS 8.1 High · Not analysed yet · Published 26 Jul 2024 · Tags: CWE-256 - [Zowe CLI allows storage of previously entered secure credentials in a plaintext file](https://agentprime.io/advisories/GHSA-ghgq-x6wc-6jr5.md) `GHSA-ghgq-x6wc-6jr5`, `CVE-2024-6833` · npm `@zowe/cli`: affected `>=7.18.0, <7.23.5`, fixed in `7.23.5` · CVSS 5.9 Medium · Not analysed yet · Published 17 Jul 2024 · Tags: CWE-256 - [IBM Datacap Navigator information disclosure](https://agentprime.io/advisories/CVE-2024-39733.md) `CVE-2024-39733` · CVE record: IBM Datacap Navigator · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2024 · Tags: CWE-256 - [BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV-03BD, AV-04AFD, AV-04ASD, AV-04FD, AV-04SD, AV-05FD, AV-05S…](https://agentprime.io/advisories/CVE-2024-39220.md) `CVE-2024-39220` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 3 Jul 2024 · Tags: CWE-256 - [Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec](https://agentprime.io/advisories/GHSA-q6c7-56cq-g2wm.md) `GHSA-q6c7-56cq-g2wm`, `CVE-2024-22032`, `GO-2024-2932` · Go `github.com/rancher/rancher`: affected `>=2.7.0, <2.7.14 || >=2.8.0, <2.8.5`, fixed in `2.7.14`, `2.8.5` · CVSS 7.1 High · Not analysed yet · Published 17 Jun 2024 · Tags: Information disclosure, CWE-256 - [Insecure permissions](https://agentprime.io/advisories/CVE-2024-27166.md) `CVE-2024-27166` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control, Weak cryptography or TLS, CWE-256 - [LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.](https://agentprime.io/advisories/CVE-2024-33375.md) `CVE-2024-33375` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-256 - [IBM Jazz Reporting Service information disclosure](https://agentprime.io/advisories/CVE-2024-25052.md) `CVE-2024-25052` · CVE record: IBM Jazz Reporting Service · CVSS 4.4 Medium · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-256 - [Plaintext password storage in Canonical Ltd. subiquity](https://agentprime.io/advisories/CVE-2022-0555.md) `CVE-2022-0555` · CVE record: Canonical Ltd. subiquity · CVSS 8.4 High · Not analysed yet · Published 3 Jun 2024 · Tags: CWE-256 - [An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page function.](https://agentprime.io/advisories/CVE-2024-28736.md) `CVE-2024-28736` · CVE record · CVSS 7.1 High · Not analysed yet · Published 31 May 2024 · Tags: CWE-256 - [TYPO3 Information Disclosure in User Authentication](https://agentprime.io/advisories/GHSA-wj85-rg5g-v8jm.md) `GHSA-wj85-rg5g-v8jm`, `PKSA-39st-t16f-w2cm` · Packagist `typo3/cms-core`: affected `>=9.0.0, <9.5.6`, fixed in `9.5.6` · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2024 · Tags: CWE-256 - [Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password.](https://agentprime.io/advisories/CVE-2024-36081.md) `CVE-2024-36081` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2024 · Tags: Hard-coded credentials, CWE-256 - [Password Storage in Plaintext Vulnerability in Digisol Router](https://agentprime.io/advisories/CVE-2024-4232.md) `CVE-2024-4232` · CVE record: Digisol Digisol Router DG-GR1321 · CVSS 5.4 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-256 - [Storing credentials in plaintext in CemiPark](https://agentprime.io/advisories/CVE-2024-4425.md) `CVE-2024-4425` · CVE record: CEMI Tomasz Pawełek CemiPark · CVSS 5.4 Medium · Not analysed yet · Published 9 May 2024 · Tags: CWE-256 - [Plaintext password storage in Dell Update Manager Plugin](https://agentprime.io/advisories/CVE-2024-28971.md) `CVE-2024-28971` · CVE record: Dell Update Manager Plugin · CVSS 3.5 Low · Not analysed yet · Published 8 May 2024 · Tags: CWE-256 - [Plaintext password storage in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2024-28961.md) `CVE-2024-28961` · CVE record: Dell Dell OpenManage Enterprise · CVSS 6.3 Medium · Not analysed yet · Published 29 Apr 2024 · Tags: CWE-256 - [Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.](https://agentprime.io/advisories/CVE-2024-28325.md) `CVE-2024-28325` · CVE record · CVSS 6.1 Medium · Not analysed yet · Published 26 Apr 2024 · Tags: Hard-coded credentials, CWE-256 - [Mirror-registry: database user and password stored in plain-text](https://agentprime.io/advisories/CVE-2024-3624.md) `CVE-2024-3624` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 7.3 High · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256 - [Mirror-registry: redis password stored in plain-text](https://agentprime.io/advisories/CVE-2024-3625.md) `CVE-2024-3625` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 7.3 High · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256 - [Mirror-registry: default database secret key stored in plain-text on initial configuration file](https://agentprime.io/advisories/CVE-2024-3623.md) `CVE-2024-3623` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 6.5 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256 - [Mirror-registry: plain-text default csrf secret key](https://agentprime.io/advisories/CVE-2024-3622.md) `CVE-2024-3622` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 8.8 High · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256 - [Plaintext password storage in BUFFALO INC. WSR-2533DHP and others](https://agentprime.io/advisories/CVE-2024-23486.md) `CVE-2024-23486` · CVE record: BUFFALO INC. WSR-2533DHP and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2024 · Tags: CWE-256 - [IBM QRadar Suite Software information disclosure](https://agentprime.io/advisories/CVE-2024-28782.md) `CVE-2024-28782` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: CWE-256 - [AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password](https://agentprime.io/advisories/CVE-2024-25138.md) `CVE-2024-25138` · CVE record: AutomationDirect C-MORE EA9 HMI EA9-T6CL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 26 Mar 2024 · Tags: CWE-256 - [Visual Studio Code Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26165.md) `CVE-2024-26165` · CVE record: Microsoft Visual Studio Code · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-256 - [BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password](https://agentprime.io/advisories/CVE-2023-5775.md) `CVE-2023-5775` · CVE record: wp_media BackWPup – WordPress Backup & Restore Plugin · CVSS 2.2 Low · Not analysed yet · Published 24 Feb 2024 · Tags: CWE-256 - [EventStoreDB Projections Subsystem has potential password leak](https://agentprime.io/advisories/CVE-2024-26133.md) `CVE-2024-26133` · CVE record: EventStore EventStore · CVSS 5.5 Medium · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-256 - [IBM Storage Defender - Resiliency Service information disclosure](https://agentprime.io/advisories/CVE-2024-22312.md) `CVE-2024-22312` · CVE record: IBM Storage Defender - Resiliency Service · CVSS 4.4 Medium · Not analysed yet · Published 10 Feb 2024 · Tags: CWE-256 - [Password Disclosure in Mia Technology's Mia-Med](https://agentprime.io/advisories/CVE-2023-6518.md) `CVE-2023-6518` · CVE record: Mia Technology Inc. MİA-MED · CVSS 7.5 High · Not analysed yet · Published 8 Feb 2024 · Tags: CWE-256 - [IBM Security Access Manager Container information disclosure](https://agentprime.io/advisories/CVE-2023-31002.md) `CVE-2023-31002` · CVE record: IBM Security Verify Access Appliance and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: CWE-256 - [Plaintext Storage of a Password in Rapid SCADA](https://agentprime.io/advisories/CVE-2024-21869.md) `CVE-2024-21869` · CVE record: Rapid Software LLC Rapid SCADA · CVSS 6.2 Medium · Not analysed yet · Published 1 Feb 2024 · Tags: CWE-256 - [Plaintext password storage in Dell NetWorker Module for Databases and Applications - Oracle](https://agentprime.io/advisories/CVE-2024-22432.md) `CVE-2024-22432` · CVE record: Dell NetWorker Module for Databases and Applications - Oracle · CVSS 7.8 High · Not analysed yet · Published 25 Jan 2024 · Tags: CWE-256 - [Plaintext password storage in Dell PowerProtect Data Manager DM5500 Appliance](https://agentprime.io/advisories/CVE-2023-44300.md) `CVE-2023-44300` · CVE record: Dell Dell PowerProtect Data Manager DM5500 Appliance · CVSS 5.5 Medium · Not analysed yet · Published 4 Dec 2023 · Tags: CWE-256 - [Clear Text Credentials Exposed via Onboarding Task](https://agentprime.io/advisories/GHSA-qf3c-rw9f-jh7v.md) `GHSA-qf3c-rw9f-jh7v`, `CVE-2023-48700`, `PYSEC-2023-288` · PyPI `nautobot-device-onboarding`: affected `>=2.0.0, <3.0.0`, fixed in `3.0.0` · CVSS 5.7 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: Information disclosure, CWE-256 - [EisBaer Scada - CWE-256: Plaintext Storage of a Password](https://agentprime.io/advisories/CVE-2023-42493.md) `CVE-2023-42493` · CVE record: EisBaer Scada v3.0.6433.1964 · CVSS 7.1 High · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-256 - [Insecure storage of password in easySoft](https://agentprime.io/advisories/CVE-2023-43777.md) `CVE-2023-43777` · CVE record: Eaton easySoft · CVSS 5.9 Medium · Not analysed yet · Published 17 Oct 2023 · Tags: CWE-256 - [Information Disclosure Vulnerability in SnapGathers](https://agentprime.io/advisories/CVE-2023-27315.md) `CVE-2023-27315` · CVE record: NetApp SnapGathers · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-256 - [Unprotected Storage of Credentials in Ormazabal products](https://agentprime.io/advisories/CVE-2022-47561.md) `CVE-2022-47561` · CVE record: Ormazabal ekorCCP and 1 more · CVSS 7.3 High · Not analysed yet · Published 20 Sept 2023 · Tags: CWE-256 - [Socomec MOD3GP-SY-120K Plaintext Storage of a Password](https://agentprime.io/advisories/CVE-2023-39452.md) `CVE-2023-39452` · CVE record: Socomec MODULYS GP (MOD3GP-SY-120K) · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2023 · Tags: CWE-256 - [Plain-text passwords saved in /var/log/messages](https://agentprime.io/advisories/CVE-2022-3261.md) `CVE-2022-3261` · CVE record: openstack and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Sept 2023 · Tags: CWE-256 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .