Skip to content
OpenAdvisories

Weakness (CWE)

CWE-316: Cleartext Storage of Sensitive Information in Memory

Variant Draft

The product stores sensitive information in cleartext in memory.

Source: MITRE CWE-316

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.6
    CVE-2026-106022

    Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools I…

    Johnson Controls EasyIO Neo IOManager and Tools Installer
  • High 7.0
    CVE-2026-77407

    RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

    RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshake. The Connection.openComplete method i…

    rabbitmq amqp091-go golang-github-rabbitmq-amqp091-go golang-github-rabbitmq-amqp091-go Debian Ubuntu Go
  • High 7.6
    CVE-2025-56565

    DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials i…

  • High 7.1
    CVE-2026-53604

    nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

    nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real *pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 privat…

    forgekeep nebula-mesh github.com/forgekeep/nebula-mesh Go
  • High 7.4
    CVE-2025-9970

    Application credential stored in clear text in memory

    Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.

    ABB MConfig ICS / OT
  • High 7.7
    CVE-2025-50109

    Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

    Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere.

    Emerson ValveLink SOLO ValveLink PRM ValveLink DTM
  • High 8.2
    CVE-2024-36792

    An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain acc…

  • High 7.3
    CVE-2023-40724

    A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as …

    Siemens QMS Automotive ICS / OT
  • High 8.1
    CVE-2022-0835

    AVEVA System Platform Cleartext Storage of Sensitive Information in Memory

    AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.

    AVEVA AVEVA System Platform