Overview 28 matches · 1 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
28matches
1in Waratek scope3.6%
0protected0.0%
1exploited3.6%
1CISA KEV3.6%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
3.6%
Outside Waratek scope
1
3.6%
Not applicable
26
92.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
28
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
3.6%
Working exploit published
0
0.0%
Proof of concept only
2
7.1%
Forecast only
0
0.0%
No public exploit
25
89.3%
split by
peak 9 / year
20171
Outside Waratek scope1
High1
not blocked1
No public exploit1
20180
20191
Not applicable1
High1
not blocked1
No public exploit1
20200
20212
Not applicable2
High2
not blocked2
No public exploit2
20222
Not applicable2
High2
not blocked2
No public exploit2
20234
Not applicable4
High4
not blocked4
No public exploit4
20244
Not applicable4
High4
not blocked4
No public exploit4
20259
No exploit published1
Not applicable8
High9
not blocked9
Proof of concept only1
No public exploit8
20265
Not applicable5
High5
not blocked5
Exploited1
Proof of concept only1
No public exploit3
2017201820192020202120222023202420252026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-65309 | High | 2026-07-31 | Not applicable | No public exploit | ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords. |
| CVE-2016-15058 | High | 2026-04-03 | Not applicable | No public exploit | Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is enabled. Attackers with local network access can sniff SNMP traffic or extract configuration data to recover plaintext credentials and gain unauthorized administrative access to the switches. |
| CVE-2026-30785 | High | 2026-03-05 | Not applicable | Proof of concept only | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs and program routines symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id(). This issue affects RustDesk Client: through 1.4.5. |
| CVE-2026-20128 | High | 2026-02-25 | Not applicable | Exploited | A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges. Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability. |
| CVE-2025-14295 | High | 2026-01-22 | Not applicable | No public exploit | Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. Storing Passwords in a Recoverable Format vulnerability (CWE-257) in the Web session management component allows an attacker to access stored passwords in a recoverable format which makes them subject to password reuse attacks by malicious users.This issue affects WebCTRL: from 6.0 through 9.0; i-Vu: from 6.0 through 9.0. |
| CVE-2025-34180 | High | 2025-12-15 | Not applicable | Proof of concept only | NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client configuration file can decode the stored value to recover the plaintext Gateway Key. Possession of the Gateway Key allows unauthorized access to NetSupport Manager connectivity services and enables remote control of systems managed through the same key. |
| CVE-2025-0280 | High | 2025-09-03 | Not applicable | No public exploit | A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access. |
| CVE-2025-58049 | High | 2025-08-28 | No exploit published | No public exploit | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs store sensitive cookies unencrypted in job statuses. XWiki shouldn't store passwords in plain text, and it shouldn't be possible to gain access to plain text passwords by gaining access to, e.g., a backup of the data directory. This vulnerability has been patched in XWiki 16.4.8, 16.10.7, and 17.4.0-rc-1. |
| CVE-2025-44958 | High | 2025-08-04 | Not applicable | No public exploit | RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. |
| CVE-2025-6996 | High | 2025-07-08 | Not applicable | No public exploit | Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords. |
| CVE-2025-6995 | High | 2025-07-08 | Not applicable | No public exploit | Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords. |
| CVE-2025-27459 | High | 2025-07-03 | Not applicable | No public exploit | The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered. |
| CVE-2024-51552 | High | 2025-05-22 | Not applicable | No public exploit | Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. |
| CVE-2024-8774 | High | 2025-03-24 | Not applicable | No public exploit | The SIMPLE.ERP client stores superuser password in a recoverable format, allowing any authenticated SIMPLE.ERP user to escalate privileges to a database administrator. This issue affect SIMPLE.ERP from 6.20 through 6.30. Only the 6.30 version received a patch 6.30@a03.9, which removed the vulnerability. Versions 6.20 and 6.25 remain unpatched. |
| CVE-2024-32042 | High | 2024-05-15 | Not applicable | No public exploit | The key used to encrypt passwords stored in the database can be found in the CyberPower PowerPanel application code, allowing the passwords to be recovered. |
| CVE-2024-3543 | High | 2024-05-02 | Not applicable | No public exploit | Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system. |
| CVE-2024-1480 | High | 2024-04-19 | Not applicable | No public exploit | Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication. |
| CVE-2023-38738 | High | 2024-01-19 | Not applicable | No public exploit | IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authentication an attacker with access to the OpenPages database could through a series of specially crafted steps could exploit this weakness and gain unauthorized access to other OpenPages accounts. IBM X-Force ID: 262594. |
| CVE-2023-5627 | High | 2023-11-01 | Not applicable | No public exploit | A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service. |
| CVE-2022-47376 | High | 2023-06-13 | Not applicable | No public exploit | The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data. |
| CVE-2023-31150 | High | 2023-05-10 | Not applicable | No public exploit | A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details. |
| CVE-2023-21726 | High | 2023-01-10 | Not applicable | No public exploit | Windows Credential Manager User Interface Elevation of Privilege Vulnerability |
| CVE-2022-22251 | High | 2022-10-18 | Not applicable | No public exploit | On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series. |
| CVE-2022-34838 | High | 2022-08-24 | Not applicable | No public exploit | Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user. |
| CVE-2021-35050 | High | 2021-06-25 | Not applicable | No public exploit | User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is present in Fidelis Network and Deception versions prior to 9.3.3. This vulnerability has been addressed in version 9.3.3 and subsequent versions. |
| CVE-2021-27485 | High | 2021-06-16 | Not applicable | No public exploit | ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser. |
| CVE-2019-3736 | High | 2019-09-27 | Not applicable | No public exploit | Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to access other components using the privileges of the compromised user. |
| CVE-2017-9942 | High | 2017-08-08 | Outside Waratek scope | No public exploit | A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems. |