Advisories · Weakness
CWE-316.
Every Advisory and CVE whose sources give the weakness CWE-316, newest first.
- CVSS 5.3 Medium
Johnson Controls Kantech Entrapass: Cleartext storage of sensitive information in memory vulnerability in Johnson Controls…
- Johnson Controls Kantech Entrapass
- CWE-316
- CVSS 7.0 High
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields
- CWE-316
<1.13.0 · fixed in 1.13.0
GHSA-27gv-rfvv-22mv · CVE-2026-77407 - CVSS 9.4 CriticalCritical · CVSS 9+
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser
- Weak cryptography or TLS
- CWE-316
<1.13.0 · fixed in 1.13.0
GHSA-33mj-cw25-m34h · CVE-2026-77405 - CVSS 7.6 High
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory.
- Information disclosure
- CWE-316
- CVSS 6.9 Medium
UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after Lock
- Septeo IT Solutions UpSignOn
- CWE-316
- CVSS 6.9 Medium
UpSignOn < 7.19.0 Sensitive Key Retention in Memory
- Septeo IT Solutions UpSignOn
- CWE-316
- CVSS 6.9 Medium
Simplex Incident Manager Clear Test
- Johnson Controls Simplex Incident Manager / Autocall Fire Administrator
- CWE-316
- CVSS 7.1 High
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
- CWE-212
- CWE-316
<0.3.8 · fixed in 0.3.8
GHSA-2p2f-px33-4vv5 · CVE-2026-53604 - CVSS 5.5 Medium
Multiple Vulnerabilities in IBM Datacap
- IBM Datacap
- IBM Datacap Navigator
- CWE-316
- CVSS 5.8 Medium
Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)
- SAP_SE SAP Business One (B1 Client Memory Dump Files)
- CWE-316
- CVSS 4.6 Medium
The mobile application insecurely handles information stored within memory.
- CWE-316
- CVSS 6.5 Medium
@perfood/couch-auth may expose session tokens, passwords
- CWE-316
<=0.21.2 · no fixed version yet
GHSA-62vx-hpcr-m9ch · CVE-2025-60794 - CVSS 3.8 Low
Fortinet FortiPAM: A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in…
- Fortinet FortiPAM
- CWE-316
- CVSS 4.4 Medium
Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser
- Palo Alto Networks Prisma Browser
- CWE-316
- CVSS 5.5 Medium
Information Disclosure vulnerability in SAP GUI for Windows
- SAP_SE SAP GUI for Windows
- CWE-316
- CVSS 6.2 Medium
Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory.
- CWE-316
- CVSS 5.7 Medium
Application credential stored in clear text in memory
- ABB MConfig
- CWE-316
- CVSS 8.5 High
Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
- Emerson ValveLink SOLO
- Emerson ValveLink DTM
- CWE-316
- CVSS 9.3 CriticalCritical · CVSS 9+
Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
- Emerson ValveLink SOLO
- Emerson ValveLink DTM
- CWE-316
- CVSS 6.1 Medium
SmartConsole Sensitive Credential Exposure via Memory Dump
- checkpoint Check Point SmartConsole
- CWE-316
- CVSS 2.8 Low
TeleMessage service: The TeleMessage service through 2025-05-05 stores certain cleartext information in…
- TeleMessage service
- CWE-316
- CVSS 4.3 Medium
IBM ApplinX Information Disclosure
- IBM ApplinX
- CWE-316
- CVSS 2.0 Low
Enpass Password Manager sensitive information in memory
- Enpass Password Manager
- CWE-316
- CVSS 3.9 Low
A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions m…
- Fortinet FortiClientiOS
- CWE-316
- CVSS 4.1 Medium
IBM Datacap Navigator information disclosure
- IBM Datacap Navigator
- CWE-316
- CVSS 8.2 High
An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.
- CWE-316
- CVSS 6.5 Medium
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump.
- CWE-316
- CVSS 6.5 Medium
Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump.
- CWE-316
- CVSS 2.2 Low
Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Goo…
- Kaspersky Password Manager for Windows
- CWE-316
- CVSS 6.7 Medium
In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data from a memory dump: the decrypted master key, dat…
- CWE-316
- CVSS 4.2 Medium
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19).
- Siemens SIMATIC STEP 7 (TIA Portal)
- CWE-316
- CVSS 2.2 Low
Sensitive information disclosure due to cleartext storage of sensitive information in memory.
- Acronis Cyber Protect 15
- CWE-316
- CVSS 7.3 High
A vulnerability has been identified in QMS Automotive (All versions < V12.39).
- Siemens QMS Automotive
- CWE-316
- CVSS 4.3 Medium
Intergard SGS sensitive information in memory
- Intergard SGS
- CWE-316
- CVSS 3.7 Low
Mitsubishi Electric Corporation GX Works3: Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric…
- Mitsubishi Electric Corporation GX Works3
- Mitsubishi Electric Corporation GX Works2
- CWE-316
- CVSS 5.5 Medium
Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability.
- Dell GeoDrive
- CWE-316
- CVSS 8.1 High
AVEVA System Platform Cleartext Storage of Sensitive Information in Memory
- AVEVA System Platform
- CWE-316
-
Axis Communications AB AXIS Device Manager: A user with permission to log on to the machine hosting the AXIS Device Manager client…
- Axis Communications AB AXIS Device Manager
- CWE-316
- CVSS 6.0 Medium
Gallagher Command Centre: Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command…
- Gallagher Command Centre
- CWE-316
- CVSS 6.0 Medium
Gallagher Command Centre: Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command…
- Gallagher Command Centre
- CWE-316
- CVSS 6.6 Medium
AVEVA InTouch: The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2…
- AVEVA InTouch
- CWE-316
- CVSS 4.4 Medium
Dell RSA BSAFE Crypto-C Micro Edition: RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4…
- Dell RSA BSAFE Crypto-C Micro Edition
- Dell RSA BSAFE MES
- CWE-316
- CVSS 9.0 HighCritical · CVSS 9+
Advantech WebAccess Cleartext Storage of Sensitive Information in Memory
- Advantech WebAccess
- CWE-316