CWE-922

CWE-922 · 10 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-922, highest CVSS first.

  1. CRITICAL 9.9CVE-2026-61728public PoC2026-10-30

    SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink repairs, portal users, including `customer_user`, can submit stored markup through `PO…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.3CVE-2026-890752026-10-14

    Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

    moveit transfer

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.5CVE-2026-1098222026-10-29

    Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG file export function may be read by an unauthenticated attacker.

    AI risk analysis on Exploit-DB.ai →

  4. LOW 3.8CVE-2026-879512026-10-22

    Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

    AI risk analysis on Exploit-DB.ai →

  5. LOW 3.1CVE-2026-914772026-10-20

    Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple proto…

    AI risk analysis on Exploit-DB.ai →

  6. LOW 2.2CVE-2026-821532026-10-14

    Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-1185682026-10-30

    Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.

    AI risk analysis on Exploit-DB.ai →

  8. UNSCOREDCVE-2026-1185512026-10-30

    Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.

    AI risk analysis on Exploit-DB.ai →

  9. UNSCOREDCVE-2026-50472026-10-08

    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passw…

    AI risk analysis on Exploit-DB.ai →

  10. UNSCOREDCVE-2026-842832026-09-25

    Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files …

    AI risk analysis on Exploit-DB.ai →