TYPE DE FAIBLESSE

CWE-540

18 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-540 (en anglais) →

CVE-2025-36076Les versions 12.0.4 à 12.1.3 FP1 d'IBM Cognos Analytics contiennent des informations sensibles intégrées directement dans le code source. Un attaquant disposant d'un compte utilisa… 4.3 MOYENNE

CVE-2026-16581Les utilisateurs de l'application mobile igloohome Smart Lock (version 3.2.3 et antérieures) sont concernés car des informations sensibles ont été laissées dans le code source de l… 6.9 MOYENNE

CVE-2026-35383La plateforme iTwin de Bentley Systems a laissé fuiter un jeton d'accès Cesium ion dans le code source de certaines pages web. Un attaquant non authentifié disposant d'un accès rés… 6.9 MOYENNE

CVE-2026-22275Les systèmes de stockage Dell ECS (v3.8.1.0–3.8.1.7) et Dell ObjectScale (versions antérieures à v4.2.0.0) contiennent des informations sensibles intégrées directement dans leur co… 4.4 MOYENNE

CVE-2025-36299IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system. 4.3 MOYENNE

CVE-2024-38327IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to… 6.8 MOYENNE

CVE-2025-0923IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks again… 5.3 MOYENNE

CVE-2025-3403A vulnerability was found in Vivotek NVR ND8422P, NVR ND9525P and NVR ND9541P 2.4.0.204/3.3.0.104/4.2.0.101. It has been classified as problematic. Affected is an unknown function … 5.1 MOYENNE

CVE-2024-35144IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system. 5.3 MOYENNE

CVE-2024-27257IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users. 4.3 MOYENNE

CVE-2024-39729IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks… 4.3 MOYENNE

CVE-2024-2265A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation … 5.3 MOYENNE

CVE-2023-30802The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source co… 5.3 MOYENNE

CVE-2023-23448Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attack… 5.3 MOYENNE

CVE-2021-34757Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfi… 4.9 MOYENNE

CVE-2021-34744Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfi… 4.9 MOYENNE

CVE-2021-34638Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as a… 6.5 MOYENNE

CVE-2021-1516A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cis… 4.3 MOYENNE