Skip to content
OpenAdvisories

Weakness (CWE)

CWE-922: Insecure Storage of Sensitive Information

Class Incomplete

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Source: MITRE CWE-922

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-12539 Public exploit

    TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover

    The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials (hostname, username, and API key) in files within the w…

    leopardhost TNC Toolbox: Web Performance Web / CMS
  • Critical 9.1
    CVE-2024-30896 Public exploit

    InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows au…

    influxdb Ubuntu
  • Critical —
    CVE-2021-27850 Public exploit EPSS 94%

    Bypass of the fix for CVE-2019-0195

    A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-2019-0195. Recap: Befor…

    Apache Software Foundation Apache Tapestry org.apache.tapestry:tapestry-core Maven