TYPE DE FAIBLESSE

CWE-316

28 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-316 (en anglais) →

CVE-2026-71455Les versions de Kantech Entrapass antérieures à la 9.20 sont touchées par cette faille. Ce logiciel est utilisé pour le contrôle d'accès et la gestion de la sécurité de bâtiments p… 5.3 MOYENNE

CVE-2026-75137Les versions d'UpSignOn pour Windows antérieures à la 7.19.0 ne parviennent pas à effacer les données sensibles de la mémoire, ce qui permet à un attaquant disposant d'un accès uti… 6.9 MOYENNE

CVE-2026-75135Les versions d'UpSignOn pour Windows antérieures à la 7.19.0 sont affectées par une fuite de mémoire qui expose une clé de sauvegarde même après le verrouillage du coffre-fort. Un … 6.9 MOYENNE

CVE-2026-27875Les versions antérieures à la 2.01.05 de Johnson Controls Simplex Incident Manager et Autocall Fire Administrator stockent des informations sensibles en mémoire sans chiffrement. U… 6.9 MOYENNE

CVE-2026-8636IBM Datacap et Datacap Navigator (versions 9.1.7 à 9.1.9) sont affectés par une faille qui permet à un utilisateur d'extraire des mots de passe et des clés cryptographiques directe… 5.5 MOYENNE

CVE-2026-24319SAP Business One stocke des données sensibles en texte clair dans des fichiers de vidage mémoire (memory dump) au lieu de les masquer. Un attaquant disposant de privilèges administ… 5.8 MOYENNE

CVE-2025-65832The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi cred… 4.6 MOYENNE

CVE-2025-60794Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a windo… 6.5 MOYENNE

CVE-2025-61713A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all ve… 4.2 MOYENNE

CVE-2025-4618A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser.… 4.4 MOYENNE

CVE-2025-42888SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability … 5.5 MOYENNE

CVE-2025-60791Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after … 6.2 MOYENNE

CVE-2025-9970Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21. 5.7 MOYENNE

CVE-2024-24915Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them. 6.1 MOYENNE

CVE-2024-49800IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user. 4.3 MOYENNE

CVE-2024-35282A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions,… 4.2 MOYENNE

CVE-2024-39732IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user. IBM X-Force ID: 295791… 4.1 MOYENNE

CVE-2024-33901Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disput… 6.5 MOYENNE

CVE-2024-33900KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-manageme… 6.5 MOYENNE

CVE-2024-25649In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data from a memory dump: the decryp… 6.7 MOYENNE

CVE-2022-46141A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the … 4.2 MOYENNE

CVE-2023-3762A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext storage of sensitive info… 4.3 MOYENNE

CVE-2022-33918Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to… 5.5 MOYENNE

CVE-2021-31989A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager a… 5.3 MOYENNE

CVE-2021-23211Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key to be discoverable in server memory dum… 6.0 MOYENNE

CVE-2021-23182Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps. This… 6.0 MOYENNE

CVE-2021-32942The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic… 6.6 MOYENNE

CVE-2019-3733RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'He… 4.9 MOYENNE