Skip to content
OpenAdvisories

Weakness (CWE)

CWE-316: Cleartext Storage of Sensitive Information in Memory

Variant Draft

The product stores sensitive information in cleartext in memory.

Source: MITRE CWE-316

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-77405

    RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

    RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an …

    rabbitmq amqp091-go telegraf keda Debian Ubuntu Azure Linux Go
  • Critical 9.4
    CVE-2025-52579

    Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

    Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freei…

    Emerson ValveLink PRM ValveLink DTM ValveLink SNAP-ON
  • Critical 9.0
    CVE-2014-2366

    Advantech WebAccess Cleartext Storage of Sensitive Information in Memory

    upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.

    Advantech WebAccess