Advisories · Weakness
CWE-540.
Every Advisory and CVE whose sources give the weakness CWE-540, newest first.
-
WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page
- CWE-540
- CWE-1188
- CVSS 7.5 High
GV-Eye Relay Payment API Key Vulnerability
- GeoVision Inc. GV-Eye
- Information disclosure
- Hard-coded credentials
- CVSS 7.5 High
GV-Eye Hardcoded API Key Vulnerability
- GeoVision Inc. GV-Eye
- Information disclosure
- Hard-coded credentials
- CVSS 2.3 Low
Intelbras TIP 125i Básico sensitive information in source
- Intelbras TIP 125i
- Information disclosure
- CWE-540
- CVSS 7.5 High
Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…
- Dell Secure Connect Gateway (SCG) Policy Manager
- CWE-540
- CVSS 4.3 Medium
IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- IBM Cognos Analytics
- CWE-540
- CVSS 9.6 CriticalCritical · CVSS 9+
Fortinet FortiMonitorOnSight: A inclusion of sensitive information in source code vulnerability in Fortinet…
- Fortinet FortiMonitorOnSight
- CWE-540
- CVSS 6.9 Medium
Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
- igloohome Smart Lock Mobile Application
- CWE-540
- CVSS 7.5 High
Algernon: Single-file mode unconditionally enables debug mode
- Information disclosure
- CWE-489
<1.17.7 · fixed in 1.17.7
GHSA-fwqx-8365-9983 · CVE-2026-45728 - CVSS 7.5 High
ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability
- ChargePoint Home Flex
- CWE-540
- CVSS 6.9 Medium
Bentley Systems iTwin Platform exposed access token
- Bentley Systems iTwin Platform
- CWE-540
- CVSS 4.4 Medium
Dell ObjectScale: Dell ECS, versions 3.8.1.0 through 3.8.1.7…
- Dell ObjectScale
- CWE-540
- CVSS 4.3 Medium
IBM Planning Analytics Information Disclosure
- IBM Planning Analytics Local
- CWE-540
- CVSS 6.8 Medium
IBM Analytics Content Hub information disclosure
- IBM Analytics Content Hub
- CWE-540
- CVSS 7.5 High
Credential disclosure
- SICK AG SICK Media Server
- CWE-540
- CVSS 5.3 Medium
IBM Cognos Analytics information disclosure
- IBM Cognos Analytics
- CWE-540
- CVSS 5.1 Medium
Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source
- Vivotek NVR ND8422P
- Vivotek NVR ND9525P
- Information disclosure
- CWE-540
- CVSS 2.0 Low
IBM Cognos Mobile information disclosure
- IBM Cognos Analytics Mobile
- CWE-540
- CVSS 8.2 High
An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.
- CWE-540
- CVSS 9.3 CriticalCritical · CVSS 9+
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
- Information disclosure
- CWE-540
>=6.21.0, <7.10.0 · fixed in 7.10.0
GHSA-88m4-h43f-wx84 · CVE-2025-23215 - CVSS 5.3 Medium
IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- CWE-540
- CVSS 7.9 High
QNAP AI Core
- QNAP Systems Inc. QNAP AI Core
- Information disclosure
- CWE-540
- CVSS 3.7 Low
Inclusion of Sensitive Information in Source Code in GitLab
- GitLab
- CWE-540
- CVSS 4.3 Medium
IBM OpenPages information disclosure
- IBM OpenPages
- CWE-540
- CVSS 2.3 Low
云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in source
- 云课网络科技有限公司 Yunke Online School System
- CWE-540
- CVSS 4.3 Medium
IBM Datacap Navigator information disclosure
- IBM Datacap Navigator
- CWE-540
- CVSS 7.5 High
Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit Software
- TNB Mobile Solutions Cockpit Software
- CWE-540
- CVSS 3.7 Low
keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source code
- keerti1924 Secret-Coder-PHP-Project
- CWE-540
- CVSS 5.3 Medium
keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code
- keerti1924 PHP-MYSQL-User-Login-System
- CWE-540
- CVSS 2.3 Low
IBM Security Verify Governance information disclosure
- IBM Security Verify Governance
- CWE-540
- CVSS 5.3 Medium
Sangfor Next-Gen Application Firewall Source Code Disclosure
- Sangfor Net-Gen Application Firewall
- CWE-540
- CVSS 7.8 High
Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1.2 contain an inform…
- Dell Storage Integration Tools for VMware (DSITV), Dell Storage vSphere Client Plugin (DSVCP), Replay Manager for VMware (RMSV)
- CWE-540
- CVSS 5.3 Medium
Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain informat…
- SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESD20AXX AIR FLOW SENSOR
- CWE-540
- CVSS 4.9 Medium
Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
- Cisco Small Business 220 Series Smart Plus Switches
- CWE-540
- CVSS 4.9 Medium
Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
- Cisco Small Business 220 Series Smart Plus Switches
- CWE-540
- CVSS 6.5 Medium
WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal
- W3 Eden, Inc. WordPress Download Manager
- Path traversal
- Cross-site scripting (XSS)
- CVSS 7.8 High
Inclusion of Sensitive Information in QSS
- QNAP Systems Inc. QSS
- CWE-540
- CVSS 4.3 Medium
Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability
- Cisco Web Security Appliance (WSA)
- CWE-540