CWE-260

25 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 7High 6Medium 11Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-103548
Improperly Stored Credentials
Itron · MV-90 xi
Medium5.3
CVE-2019-25465
Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal
Hisilicon · HiIpcam
High8.7
CVE-2025-15151
TaleLin Lin-CMS Tests Folder config.py password in configuration file
TaleLin · Lin-CMS
Medium6.3
CVE-2023-53770
MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpoint
MiniDVBLinux · MiniDVBLinux(TM) Distribution (MLD)
High8.7
CVE-2023-53739
Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosure
Tinycontrol · Tinycontrol LAN Controller v
Critical9.9
CVE-2025-33119
IBM QRadar SIEM Information Disclosure
IBM · QRadar Security Information and Event Management
Medium6.5
CVE-2025-36002
IBM Sterling B2B Integrator information disclosure
IBM · Sterling B2B Integrator
Medium5.5
CVE-2025-36100
IBM MQ information disclosure
IBM · MQ
Medium5.1
CVE-2025-57754
eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
kristoferfannar · eslint-ban-moment
Critical9.8
CVE-2025-51540
EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This hashing method is cryptographically weak and allows attackers to…
Product not named
Medium5.3