Weaknesses of type CWE-256
207 resultsCVE-2019-19105MEDIUMABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentialsEPSS 0.3%CVE-2022-0555HIGHSubiquity Shows Guided Storage Passphrase in Plaintext with Read-all PermissionsEPSS 0.3%CVE-2025-53662MEDIUMJenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins contrEPSS 0.3%CVE-2023-43777MEDIUMInsecure storage of password in easySoftEPSS 0.3%CVE-2022-3644MEDIUMThe collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write modEPSS 0.3%CVE-2026-33216HIGHNATS has MQTT plaintext password disclosureEPSS 0.3%CVE-2025-15128MEDIUMZKTeco BioTime Endpoint safe_setting credentials storageEPSS 0.3%CVE-2023-39227MEDIUMSoftneta MedDream PACS Plaintext Storage of a PasswordEPSS 0.3%CVE-2025-33079MEDIUMIBM Controller information disclosureEPSS 0.3%CVE-2025-53665MEDIUMJenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the job configuration forEPSS 0.3%CVE-2020-37115HIGHGUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password StorageEPSS 0.3%CVE-2025-25985LOWAn issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execEPSS 0.3%CVE-2021-1126MEDIUMCisco Firepower Management Center Information Disclosure VulnerabilityEPSS 0.3%CVE-2023-3395MEDIUM
All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files EPSS 0.3%CVE-2022-33928MEDIUMDell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges coulEPSS 0.3%CVE-2025-53674MEDIUMJenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, inEPSS 0.3%CVE-2025-53677MEDIUMJenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential forEPSS 0.3%CVE-2024-28971LOWDell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high prEPSS 0.3%CVE-2020-1669MEDIUMJunos OS: NFX350: Password hashes stored in world-readable formatEPSS 0.3%CVE-2025-52164HIGHSoftware GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.EPSS 0.2%