CWE-315

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20243
4. 20252
5. 20261

Newest CVEs

• CVE-2026-25818

  HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for…

  Product not named

  Critical9.1
• CVE-2025-8528

  Exrick xboot getMenuList sensitive information in a cookie

  Exrick · xboot

  Medium6.3
• CVE-2025-4537

  yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie

  yangzongzhuan · RuoYi-Vue

  Low2.3
• CVE-2024-41290

  FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.

  Product not named

  High8.1
• CVE-2024-8644

  Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

  Oceanic Software · ValeApp

  Critical9.3
• CVE-2024-24768

  1Panel set-cookie is missing the Secure keyword

  1Panel-dev · 1Panel

  Medium6.5
• CVE-2021-34564

  In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie

  Phoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETH

  Medium5.5
• CVE-2018-19941

  Cleartext Storage of Sensitive Information in Cookies

  QNAP Systems Inc. · QTS

  High7.5

Vendors it comes up for most

1. 1Panel-dev1
2. Exrick1
3. Oceanic Software1
4. Phoenix Contact1
5. QNAP Systems Inc.1
6. yangzongzhuan1