# CWE-316.

Every Advisory and CVE whose sources give the weakness CWE-316, newest first.

## Records, newest first

- [Johnson Controls Kantech Entrapass: Cleartext storage of sensitive information in memory vulnerability in Johnson Controls…](https://agentprime.io/advisories/CVE-2026-71455.md)
  `CVE-2026-71455` · CVE record: Johnson Controls Kantech Entrapass · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-316
- [RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields](https://agentprime.io/advisories/GHSA-27gv-rfvv-22mv.md)
  `GHSA-27gv-rfvv-22mv`, `CVE-2026-77407`, `GO-2026-6491` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-316
- [RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser](https://agentprime.io/advisories/GHSA-33mj-cw25-m34h.md)
  `GHSA-33mj-cw25-m34h`, `CVE-2026-77405`, `GO-2026-6492` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-316
- [DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory.](https://agentprime.io/advisories/CVE-2025-56565.md)
  `CVE-2025-56565` · CVE record · CVSS 7.6 High · Not analysed yet · Published 16 Sept 2026 · Tags: Information disclosure, CWE-316
- [UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after Lock](https://agentprime.io/advisories/CVE-2026-75137.md)
  `CVE-2026-75137` · CVE record: Septeo IT Solutions UpSignOn · CVSS 6.9 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-316
- [UpSignOn < 7.19.0 Sensitive Key Retention in Memory](https://agentprime.io/advisories/CVE-2026-75135.md)
  `CVE-2026-75135` · CVE record: Septeo IT Solutions UpSignOn · CVSS 6.9 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-316
- [Simplex Incident Manager Clear Test](https://agentprime.io/advisories/CVE-2026-27875.md)
  `CVE-2026-27875` · CVE record: Johnson Controls Simplex Incident Manager / Autocall Fire Administrator · CVSS 6.9 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-316
- [nebula-mesh: CA private key not zeroized on web mobile-bundle error paths](https://agentprime.io/advisories/GHSA-2p2f-px33-4vv5.md)
  `GHSA-2p2f-px33-4vv5`, `CVE-2026-53604`, `GO-2026-5984` · Go `github.com/forgekeep/nebula-mesh`: affected `<0.3.8`, fixed in `0.3.8` · CVSS 7.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-212, CWE-316
- [Multiple Vulnerabilities in IBM Datacap](https://agentprime.io/advisories/CVE-2026-8636.md)
  `CVE-2026-8636` · CVE record: IBM Datacap and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-316
- [Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)](https://agentprime.io/advisories/CVE-2026-24319.md)
  `CVE-2026-24319` · CVE record: SAP_SE SAP Business One (B1 Client Memory Dump Files) · CVSS 5.8 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-316
- [The mobile application insecurely handles information stored within memory.](https://agentprime.io/advisories/CVE-2025-65832.md)
  `CVE-2025-65832` · CVE record · CVSS 4.6 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-316
- [@perfood/couch-auth may expose session tokens, passwords](https://agentprime.io/advisories/GHSA-62vx-hpcr-m9ch.md)
  `GHSA-62vx-hpcr-m9ch`, `CVE-2025-60794` · npm `@perfood/couch-auth`: affected `<=0.21.2`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 20 Nov 2025 · Tags: CWE-316
- [Fortinet FortiPAM: A Cleartext Storage of Sensitive Information in Memory vulnerability \[CWE-316\] in…](https://agentprime.io/advisories/CVE-2025-61713.md)
  `CVE-2025-61713` · CVE record: Fortinet FortiPAM · CVSS 3.8 Low · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-316
- [Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser](https://agentprime.io/advisories/CVE-2025-4618.md)
  `CVE-2025-4618` · CVE record: Palo Alto Networks Prisma Browser · CVSS 4.4 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-316
- [Information Disclosure vulnerability in SAP GUI for Windows](https://agentprime.io/advisories/CVE-2025-42888.md)
  `CVE-2025-42888` · CVE record: SAP_SE SAP GUI for Windows · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-316
- [Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory.](https://agentprime.io/advisories/CVE-2025-60791.md)
  `CVE-2025-60791` · CVE record · CVSS 6.2 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: CWE-316
- [Application credential stored in clear text in memory](https://agentprime.io/advisories/CVE-2025-9970.md)
  `CVE-2025-9970` · CVE record: ABB MConfig · CVSS 5.7 Medium · Not analysed yet · Published 8 Oct 2025 · Tags: CWE-316
- [Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory](https://agentprime.io/advisories/CVE-2025-50109.md)
  `CVE-2025-50109` · CVE record: Emerson ValveLink SOLO and 3 more · CVSS 8.5 High · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-316
- [Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory](https://agentprime.io/advisories/CVE-2025-52579.md)
  `CVE-2025-52579` · CVE record: Emerson ValveLink SOLO and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-316
- [SmartConsole Sensitive Credential Exposure via Memory Dump](https://agentprime.io/advisories/CVE-2024-24915.md)
  `CVE-2024-24915` · CVE record: checkpoint Check Point SmartConsole · CVSS 6.1 Medium · Not analysed yet · Published 29 Jun 2025 · Tags: CWE-316
- [TeleMessage service: The TeleMessage service through 2025-05-05 stores certain cleartext information in…](https://agentprime.io/advisories/CVE-2025-48930.md)
  `CVE-2025-48930` · CVE record: TeleMessage service · CVSS 2.8 Low · Not analysed yet · Published 28 May 2025 · Tags: CWE-316
- [IBM ApplinX Information Disclosure](https://agentprime.io/advisories/CVE-2024-49800.md)
  `CVE-2024-49800` · CVE record: IBM ApplinX · CVSS 4.3 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-316
- [Enpass Password Manager sensitive information in memory](https://agentprime.io/advisories/CVE-2024-9203.md)
  `CVE-2024-9203` · CVE record: Enpass Password Manager · CVSS 2.0 Low · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-316
- [A cleartext storage of sensitive information in memory vulnerability \[CWE-316\] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions m…](https://agentprime.io/advisories/CVE-2024-35282.md)
  `CVE-2024-35282` · CVE record: Fortinet FortiClientiOS · CVSS 3.9 Low · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-316
- [IBM Datacap Navigator information disclosure](https://agentprime.io/advisories/CVE-2024-39732.md)
  `CVE-2024-39732` · CVE record: IBM Datacap Navigator · CVSS 4.1 Medium · Not analysed yet · Published 14 Jul 2024 · Tags: CWE-316
- [An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.](https://agentprime.io/advisories/CVE-2024-36792.md)
  `CVE-2024-36792` · CVE record · CVSS 8.2 High · Not analysed yet · Published 7 Jun 2024 · Tags: CWE-316
- [KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump.](https://agentprime.io/advisories/CVE-2024-33900.md)
  `CVE-2024-33900` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2024 · Tags: CWE-316
- [Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump.](https://agentprime.io/advisories/CVE-2024-33901.md)
  `CVE-2024-33901` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2024 · Tags: CWE-316
- [Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Goo…](https://agentprime.io/advisories/CVE-2023-23349.md)
  `CVE-2023-23349` · CVE record: Kaspersky Kaspersky Password Manager for Windows · CVSS 2.2 Low · Not analysed yet · Published 22 Mar 2024 · Tags: CWE-316
- [In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data from a memory dump: the decrypted master key, dat…](https://agentprime.io/advisories/CVE-2024-25649.md)
  `CVE-2024-25649` · CVE record · CVSS 6.7 Medium · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-316
- [A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19).](https://agentprime.io/advisories/CVE-2022-46141.md)
  `CVE-2022-46141` · CVE record: Siemens SIMATIC STEP 7 (TIA Portal) · CVSS 4.2 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-316
- [Sensitive information disclosure due to cleartext storage of sensitive information in memory.](https://agentprime.io/advisories/CVE-2023-44153.md)
  `CVE-2023-44153` · CVE record: Acronis Acronis Cyber Protect 15 · CVSS 2.2 Low · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-316
- [A vulnerability has been identified in QMS Automotive (All versions < V12.39).](https://agentprime.io/advisories/CVE-2023-40724.md)
  `CVE-2023-40724` · CVE record: Siemens QMS Automotive · CVSS 7.3 High · Not analysed yet · Published 12 Sept 2023 · Tags: CWE-316
- [Intergard SGS sensitive information in memory](https://agentprime.io/advisories/CVE-2023-3762.md)
  `CVE-2023-3762` · CVE record: Intergard SGS · CVSS 4.3 Medium · Not analysed yet · Published 19 Jul 2023 · Tags: CWE-316
- [Mitsubishi Electric Corporation GX Works3: Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric…](https://agentprime.io/advisories/CVE-2022-29832.md)
  `CVE-2022-29832` · CVE record: Mitsubishi Electric Corporation GX Works3 and 2 more · CVSS 3.7 Low · Not analysed yet · Published 24 Nov 2022 · Tags: CWE-316
- [Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability.](https://agentprime.io/advisories/CVE-2022-33918.md)
  `CVE-2022-33918` · CVE record: Dell GeoDrive · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2022 · Tags: CWE-316
- [AVEVA System Platform Cleartext Storage of Sensitive Information in Memory](https://agentprime.io/advisories/CVE-2022-0835.md)
  `CVE-2022-0835` · CVE record: AVEVA AVEVA System Platform · CVSS 8.1 High · Not analysed yet · Published 11 Apr 2022 · Tags: CWE-316
- [Axis Communications AB AXIS Device Manager: A user with permission to log on to the machine hosting the AXIS Device Manager client…](https://agentprime.io/advisories/CVE-2021-31989.md)
  `CVE-2021-31989` · CVE record: Axis Communications AB AXIS Device Manager · No CVSS score · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-316
- [Gallagher Command Centre: Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command…](https://agentprime.io/advisories/CVE-2021-23211.md)
  `CVE-2021-23211` · CVE record: Gallagher Command Centre · CVSS 6.0 Medium · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-316
- [Gallagher Command Centre: Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command…](https://agentprime.io/advisories/CVE-2021-23182.md)
  `CVE-2021-23182` · CVE record: Gallagher Command Centre · CVSS 6.0 Medium · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-316
- [AVEVA InTouch: The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2…](https://agentprime.io/advisories/CVE-2021-32942.md)
  `CVE-2021-32942` · CVE record: AVEVA InTouch · CVSS 6.6 Medium · Not analysed yet · Published 9 Jun 2021 · Tags: CWE-316
- [Dell RSA BSAFE Crypto-C Micro Edition: RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4…](https://agentprime.io/advisories/CVE-2019-3733.md)
  `CVE-2019-3733` · CVE record: Dell RSA BSAFE Crypto-C Micro Edition and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 30 Sept 2019 · Tags: CWE-316
- [Advantech WebAccess Cleartext Storage of Sensitive Information in Memory](https://agentprime.io/advisories/CVE-2014-2366.md)
  `CVE-2014-2366` · CVE record: Advantech WebAccess · CVSS 9.0 High · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2014 · Tags: CWE-316

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-316>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-316/>. Everything for agents: <https://agentprime.io/llms.txt>.