Search Vulnerabilities

Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor w...

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information

n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses

Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets

Cleartext Storage of Sensitive Information for Puppet Resource API

Steeltoe: TLS private keys written to /tmp with default permissions, never deleted

SolidInvoice: API tokens stored as plaintext in the database allowing full credential compromise on database breach

Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext...

Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file

RustFS: Sensitive Information Leakage (SessionToken and SecretAccessKey) in RustFS Logs [Debug Mode]

Information Exposure Vulnerability in CP-Plus Wi-Fi Camera

Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path

Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC

BIG-IP DNS tmsh vulnerability

BIG-IP iControl REST vulnerability

JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file