CWE-316
42 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 42
- Last 12 months
- 14
- Critical
- 2
- Known exploited
- 0
Critical 2High 7Medium 26Low 7Not scored 0
CVEs per yearBy the year they were published
- 20141
- 20191
- 20214
- 20223
- 20234
- 20248
- 202512
- 20269
Newest CVEs
- CVE-2026-71455
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue…
Johnson Controls · Kantech Entrapass
Medium5.3 - CVE-2026-77407
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields
rabbitmq · amqp091-go
High7.0 - CVE-2025-56565
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory.…
Product not named
High7.6 - CVE-2026-53604
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
forgekeep · nebula-mesh
High7.1 - CVE-2026-75137
UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after Lock
Septeo IT Solutions · UpSignOn
Medium6.9 - CVE-2026-75135
UpSignOn < 7.19.0 Sensitive Key Retention in Memory
Septeo IT Solutions · UpSignOn
Medium6.9 - CVE-2026-27875
Simplex Incident Manager Clear Test
Johnson Controls · Simplex Incident Manager / Autocall Fire Administrator
Medium6.9 - CVE-2026-8636
Multiple Vulnerabilities in IBM Datacap
IBM · Datacap
Medium5.5 - CVE-2026-24319
Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)
SAP_SE · SAP Business One (B1 Client Memory Dump Files)
Medium5.8 - CVE-2025-65832
The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and…
Product not named
Medium4.6