Advisories · Weakness
CWE-921.
Every Advisory and CVE whose sources give the weakness CWE-921, newest first.
- CVSS 9.8 CriticalCritical · CVSS 9+
Authentication Bypass Vulnerability in SAP Financial Consolidation
- SAP_SE SAP Financial Consolidation
- CWE-921
- CVSS 5.1 Medium
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control
- Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Applications
- Dario Health Dario Application Database and Internet-based Server Infrastructure
- CWE-921
- CVSS 8.2 High
Information Disclosure in E-Kent's Pallium Vehicle Tracking
- E-Kent Pallium Vehicle Tracking
- Hard-coded credentials
- CWE-921
- CVSS 6.0 Medium
Insecure Key & Secret Management vulnerability in SAP GUI for Windows
- SAP_SE SAP GUI for Windows
- CWE-921
- CVSS 4.7 Medium
scikit-learn sensitive data leakage vulnerability
- Information disclosure
- CWE-921
<1.5.0 · fixed in 1.5.0
GHSA-jw8x-6495-233v · CVE-2024-5206 - CVSS 5.0 Medium
An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs.
- Motorola Phones
- CWE-921
- CVSS 7.5 High
Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information
- Socomec MODULYS GP (MOD3GP-SY-120K)
- CWE-921
- CVSS 7.5 High
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
- Information disclosure
- CWE-921
<11.0 · fixed in 11.0
GHSA-36cm-h8gv-mg97 · CVE-2023-2665 - CVSS 6.5 Medium
Ignition config accessible to unprivileged software on VMware
- Information disclosure
- Broken access control
<2.14.0 · fixed in 2.14.0
GHSA-hj57-j5cw-2mwp · CVE-2022-1706 - CVSS 2.4 Low
Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control
- Philips Gemini 16 Slice
- Philips Gemini Dual
- CWE-921