Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5A vulnerability has been found in SourceCodester Student Result Management System 1.0.Apr 5, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Apr 2, 2026
- Medium6.5Trino is a distributed SQL query engine for big data analytics.Mar 31, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Mar 30, 2026
- Critical9.1WWBN AVideo is an open source video platform.Mar 27, 2026
- High7.5When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.Mar 27, 2026
- Medium5.1The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial int…Mar 26, 2026
- High7.5WWBN AVideo is an open source video platform.Mar 23, 2026
- High8.7Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined wit…Mar 23, 2026
- Medium4.3Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with…Mar 18, 2026
- High7.1Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by a…Mar 17, 2026
- Medium4.0A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail…Mar 10, 2026
- Medium5.6The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms.Mar 10, 2026
- Medium4.4IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.Mar 10, 2026
- Medium6.5An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.Mar 9, 2026
- High7.5Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.Mar 3, 2026
- Medium5.7Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator…Mar 3, 2026
- Medium6.5The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authenticat…Feb 27, 2026
- Medium4.9Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with access to the database t…Feb 25, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via…Feb 24, 2026
- High8.4MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.EPSS 0.1%Dec 10, 2025
- High8.4MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover.EPSS 0.1%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attac…EPSS 0.2%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be vi…EPSS 0.2%Dec 10, 2025
- Medium4.9Strapi Cleartext Storage of Sensitive Information VulnerabilityKEVEPSS 3.6%Apr 19, 2023