CWE-526: CWE-526

This vulnerability in Quarkus allows attackers to access sensitive build system information that remains in artifacts created with the Gradle plugin. ...

OpenC3 COSMOS versions before 6.0.2 expose service credentials as environment variables in all containers, allowing attackers to access sensitive auth...

IBM Storage Virtualize vSphere Remote Plug-in versions 1.0 and 1.1 expose sensitive credential information to remote users after deployment. This vuln...

IBM Controller and Cognos Controller versions store sensitive information unencrypted in environmental variables files, allowing authenticated users t...

This vulnerability in Tap&Sign App allows attackers to exploit weak password recovery mechanisms and access sensitive information stored in cleartext ...

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 exposes sensitive information through an environment variable. This information disclosure could p...

This vulnerability in Keycloak's realm import functionality allows attackers to inject malicious content via crafted realm documents that reference en...