CWE-214

CWE-214 · 7 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-214, highest CVSS first.

  1. MEDIUM 6.5CVE-2026-116246public PoC2026-10-30

    To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own process environment: as PGPASSWORD for the PSQL tool, and under a per-process variable for a utility. Nothing remove…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.5CVE-2026-119117public PoC2026-10-30

    Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the app…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.5CVE-2026-921712026-10-26

    A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments (`-tls_keystore_pass…

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5CVE-2026-1134962026-10-20

    A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is passed directly as a command-line argument to an underlying system utility. A local unprivileged attacker on a host that allows cross…

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 5CVE-2026-1134952026-10-20

    A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line arguments to background helper processes during image retrieval operations. A local, unprivileged attacker on a system permitting cros…

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 4.7CVE-2026-1099712026-10-14

    A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem.

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-102371public PoC2026-09-29

    In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument (pro attach <token>). On syst…

    AI risk analysis on Exploit-DB.ai →