# CWE-540.

Every Advisory and CVE whose sources give the weakness CWE-540, newest first.

## Records, newest first

- [WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page](https://agentprime.io/advisories/CVE-2026-78192.md)
  `CVE-2026-78192` · CVE record · No CVSS score · Not analysed yet · Published 31 Oct 2026 · Tags: CWE-540, CWE-1188
- [GV-Eye Relay Payment API Key Vulnerability](https://agentprime.io/advisories/CVE-2026-103097.md)
  `CVE-2026-103097` · CVE record: GeoVision Inc. GV-Eye · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Information disclosure, Hard-coded credentials, CWE-540
- [GV-Eye Hardcoded API Key Vulnerability](https://agentprime.io/advisories/CVE-2026-103096.md)
  `CVE-2026-103096` · CVE record: GeoVision Inc. GV-Eye · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Information disclosure, Hard-coded credentials, CWE-540
- [Intelbras TIP 125i Básico sensitive information in source](https://agentprime.io/advisories/CVE-2026-101265.md)
  `CVE-2026-101265` · CVE record: Intelbras TIP 125i · CVSS 2.3 Low · Not analysed yet · Published 28 Sept 2026 · Tags: Information disclosure, CWE-540
- [Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…](https://agentprime.io/advisories/CVE-2026-73591.md)
  `CVE-2026-73591` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-540
- [IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2025-36076.md)
  `CVE-2025-36076` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-540
- [Fortinet FortiMonitorOnSight: A inclusion of sensitive information in source code vulnerability in Fortinet…](https://agentprime.io/advisories/CVE-2026-84390.md)
  `CVE-2026-84390` · CVE record: Fortinet FortiMonitorOnSight · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-540
- [Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application](https://agentprime.io/advisories/CVE-2026-16581.md)
  `CVE-2026-16581` · CVE record: igloohome Smart Lock Mobile Application · CVSS 6.9 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-540
- [Algernon: Single-file mode unconditionally enables debug mode](https://agentprime.io/advisories/GHSA-fwqx-8365-9983.md)
  `GHSA-fwqx-8365-9983`, `CVE-2026-45728`, `GO-2026-5385` · Go `github.com/xyproto/algernon`: affected `<1.17.7`, fixed in `1.17.7` · CVSS 7.5 High · Not analysed yet · Published 19 May 2026 · Tags: Information disclosure, CWE-489, CWE-540, CWE-1188
- [ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-4155.md)
  `CVE-2026-4155` · CVE record: ChargePoint Home Flex · CVSS 7.5 High · Not analysed yet · Published 11 Apr 2026 · Tags: CWE-540
- [Bentley Systems iTwin Platform exposed access token](https://agentprime.io/advisories/CVE-2026-35383.md)
  `CVE-2026-35383` · CVE record: Bentley Systems iTwin Platform · CVSS 6.9 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-540
- [Dell ObjectScale: Dell ECS, versions 3.8.1.0 through 3.8.1.7…](https://agentprime.io/advisories/CVE-2026-22275.md)
  `CVE-2026-22275` · CVE record: Dell ObjectScale · CVSS 4.4 Medium · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-540
- [IBM Planning Analytics Information Disclosure](https://agentprime.io/advisories/CVE-2025-36299.md)
  `CVE-2025-36299` · CVE record: IBM IBM Planning Analytics Local · CVSS 4.3 Medium · Not analysed yet · Published 17 Nov 2025 · Tags: CWE-540
- [IBM Analytics Content Hub information disclosure](https://agentprime.io/advisories/CVE-2024-38327.md)
  `CVE-2024-38327` · CVE record: IBM Analytics Content Hub · CVSS 6.8 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-540
- [Credential disclosure](https://agentprime.io/advisories/CVE-2025-49182.md)
  `CVE-2025-49182` · CVE record: SICK AG SICK Media Server · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2025 · Tags: CWE-540
- [IBM Cognos Analytics information disclosure](https://agentprime.io/advisories/CVE-2025-0923.md)
  `CVE-2025-0923` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: CWE-540
- [Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source](https://agentprime.io/advisories/CVE-2025-3403.md)
  `CVE-2025-3403` · CVE record: Vivotek NVR ND8422P and 2 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure, CWE-540
- [IBM Cognos Mobile information disclosure](https://agentprime.io/advisories/CVE-2024-55907.md)
  `CVE-2024-55907` · CVE record: IBM Cognos Analytics Mobile · CVSS 2.0 Low · Not analysed yet · Published 2 Mar 2025 · Tags: CWE-540
- [An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.](https://agentprime.io/advisories/CVE-2025-26013.md)
  `CVE-2025-26013` · CVE record · CVSS 8.2 High · Not analysed yet · Published 21 Feb 2025 · Tags: CWE-540
- [PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext](https://agentprime.io/advisories/GHSA-88m4-h43f-wx84.md)
  `GHSA-88m4-h43f-wx84`, `CVE-2025-23215` · Maven `net.sourceforge.pmd:pmd-core` and 2 more: affected `>=6.21.0, <7.10.0`, fixed in `7.10.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jan 2025 · Tags: Information disclosure, CWE-540
- [IBM Maximo Application Suite information disclosure](https://agentprime.io/advisories/CVE-2024-35144.md)
  `CVE-2024-35144` · CVE record: IBM Maximo Application Suite · CVSS 5.3 Medium · Not analysed yet · Published 25 Jan 2025 · Tags: CWE-540
- [QNAP AI Core](https://agentprime.io/advisories/CVE-2024-38647.md)
  `CVE-2024-38647` · CVE record: QNAP Systems Inc. QNAP AI Core · CVSS 7.9 High · Not analysed yet · Published 22 Nov 2024 · Tags: Information disclosure, CWE-540
- [Inclusion of Sensitive Information in Source Code in GitLab](https://agentprime.io/advisories/CVE-2024-9596.md)
  `CVE-2024-9596` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 10 Oct 2024 · Tags: CWE-540
- [IBM OpenPages information disclosure](https://agentprime.io/advisories/CVE-2024-27257.md)
  `CVE-2024-27257` · CVE record: IBM OpenPages · CVSS 4.3 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-540
- [云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in source](https://agentprime.io/advisories/CVE-2024-8417.md)
  `CVE-2024-8417` · CVE record: 云课网络科技有限公司 Yunke Online School System · CVSS 2.3 Low · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-540
- [IBM Datacap Navigator information disclosure](https://agentprime.io/advisories/CVE-2024-39729.md)
  `CVE-2024-39729` · CVE record: IBM Datacap Navigator · CVSS 4.3 Medium · Not analysed yet · Published 15 Jul 2024 · Tags: CWE-540
- [Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit Software](https://agentprime.io/advisories/CVE-2024-1272.md)
  `CVE-2024-1272` · CVE record: TNB Mobile Solutions Cockpit Software · CVSS 7.5 High · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-540
- [keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source code](https://agentprime.io/advisories/CVE-2024-2355.md)
  `CVE-2024-2355` · CVE record: keerti1924 Secret-Coder-PHP-Project · CVSS 3.7 Low · Not analysed yet · Published 10 Mar 2024 · Tags: CWE-540
- [keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code](https://agentprime.io/advisories/CVE-2024-2265.md)
  `CVE-2024-2265` · CVE record: keerti1924 PHP-MYSQL-User-Login-System · CVSS 5.3 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: CWE-540
- [IBM Security Verify Governance information disclosure](https://agentprime.io/advisories/CVE-2023-35013.md)
  `CVE-2023-35013` · CVE record: IBM Security Verify Governance · CVSS 2.3 Low · Not analysed yet · Published 15 Oct 2023 · Tags: CWE-540
- [Sangfor Next-Gen Application Firewall Source Code Disclosure](https://agentprime.io/advisories/CVE-2023-30802.md)
  `CVE-2023-30802` · CVE record: Sangfor Net-Gen Application Firewall · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-540
- [Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1.2 contain an inform…](https://agentprime.io/advisories/CVE-2023-39250.md)
  `CVE-2023-39250` · CVE record: Dell Dell Storage Integration Tools for VMware (DSITV), Dell Storage vSphere Client Plugin (DSVCP), Replay Manager for VMware (RMSV) · CVSS 7.8 High · Not analysed yet · Published 16 Aug 2023 · Tags: CWE-540
- [Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain informat…](https://agentprime.io/advisories/CVE-2023-23448.md)
  `CVE-2023-23448` · CVE record: SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-540
- [Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34744.md)
  `CVE-2021-34744` · CVE record: Cisco Cisco Small Business 220 Series Smart Plus Switches · CVSS 4.9 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: CWE-540
- [Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34757.md)
  `CVE-2021-34757` · CVE record: Cisco Cisco Small Business 220 Series Smart Plus Switches · CVSS 4.9 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: CWE-540
- [WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal](https://agentprime.io/advisories/CVE-2021-34638.md)
  `CVE-2021-34638` · CVE record: W3 Eden, Inc. WordPress Download Manager · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2021 · Tags: Path traversal, Cross-site scripting (XSS), CWE-540
- [Inclusion of Sensitive Information in QSS](https://agentprime.io/advisories/CVE-2021-28805.md)
  `CVE-2021-28805` · CVE record: QNAP Systems Inc. QSS · CVSS 7.8 High · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-540
- [Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1516.md)
  `CVE-2021-1516` · CVE record: Cisco Cisco Web Security Appliance (WSA) · CVSS 4.3 Medium · Not analysed yet · Published 6 May 2021 · Tags: CWE-540

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-540>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-540/>. Everything for agents: <https://agentprime.io/llms.txt>.