CWE-922: Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- unknown defender security, wpmudev defender +1 moreWordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability5.0 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (webservices), business objects business intgelligence platform +2 moreInsecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)4.3 Medium
- apple macosThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16...5.5 Medium
- levelfourstorefront shopping cart & ecommerce store, shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure5.3 Medium
- f5 big-ip next cnf, big-ip next cloud-native network functions +1 moreBIG-IP NEXT CNF vulnerability4.4 Medium
- codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 moreDrag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure5.3 Medium
- joomunited wp meta seoWP Meta SEO <= 4.5.12 - Information Exposure via Meta Description5.3 Medium
- logint lomag warehouse management, lomag warehouse management +1 moreAn issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to...5.5 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure5.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure5.3 Medium
- cmseasyAn issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via...3.5 Low
- tormach pathpilot controller, pilotpath controller +1 moreAn issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a...7.5 High
- broadcom brocade sannav, brocade sannav +1 moreSQL Table names, column names, and SQL queries are collected in DR standby Supportsave7.7 High
- broadcom brocade sannav, brocade sannav +1 moreInsecure backup6.8 Medium
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...5.3 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability4.3 Medium
- eprosima fast ddsAn issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause...5.5 Medium
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability4.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure5.3 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn modem driver, there is a possible system crash due to improper input validation. This could...6.0 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...4.4 Medium
- google androidIn asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check....5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sonoma...8.8 High
- avsystem unified management platformInsecure storage of LDAP passwords in the authentication functionality of AVSystem Unified...6.5 Medium
- mitel micontact center businessA vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4...7.5 High
- apple ipados, macos, tvos +3 more +5 moreA logic issue was addressed with improved restrictions. This issue is fixed in tvOS 17.4, iOS 17...5.5 Medium
- apple macosA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...3.3 Low
- apple macos, ios and ipados, ipad os +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple macos, tvos, ios and ipados +2 more +4 moreThis issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS...5.5 Medium
- openatom openharmonyHuks has an insecure storage of sensitive information vulnerability4.3 Medium
- mozilla thunderbird, debian linux +1 moreThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 High
- dagg uverifAn issue in uverif v.2.0 allows a remote attacker to obtain sensitive information.5.3 Medium
- hazelcastMissing permission checks on Hazelcast client protocol7.6 High
- apache camelApache Camel issue on ExchangeCreatedEvent2.9 Low
- hcl software sametime chat, hcltech sametime +1 moreHCL Sametime Chat is affected by an unimplemented feature in the UI3.9 Low
- apple ipados, macos, tvos +3 more +5 moreThe issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14...5.5 Medium
- apple macos, watchos, ios and ipados +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple macos, tvos, watchos +3 more +5 moreThis issue was addressed with improved state management. This issue is fixed in tvOS 17.1,...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS...5.5 Medium
- infinitewp client, revmakx infinitewp client +1 moreInfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure5.9 Medium
- google androidIn applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a...3.3 Low
- freebsdbhyveload(8) host file access6.3 Medium
- motorola cx2l firmwareA hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the...5.3 Medium
- expressvpnExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according...7.5 High
- apache solrApache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions7.5 High
- intelbras action rf 1200 firmwareIntelbras Roteador ACtion RF 1200 1.2.2 esposes the Password in Cookie resulting in Login Bypass.8.1 High
- google androidIn multiple files, there is a possible way that trimmed content could be included in PDF output...5.5 Medium
- vantage6vantage6 unencrypted task can be created in encrypted collaboration3.5 Low
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...3.3 Low
- Show moreLoading…