CWE-256 明文存储口令 类弱点 171 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-256 指产品将密码以明文形式存储在内存或文件等资源中，属于数据保护不当类漏洞。攻击者若获取系统访问权限，可直接读取存储介质中的明文密码，进而冒充合法用户进行未授权访问或横向移动。开发者应避免直接存储明文，转而采用加盐哈希算法对密码进行不可逆处理，并确保密钥管理安全，从而有效防止凭据泄露风险。
... Properties prop = new Properties(); prop.load(new FileInputStream("config.properties")); String password = prop.getProperty("password"); DriverManager.getConnection(url, usr, password); ...... String password = regKey.GetValue(passKey).toString(); NetworkCredential netCred = new NetworkCredential(username,password,domain); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-24375 | MySQL K8s operator 安全漏洞 — mysql-k8s-operator | 5.0 | Medium | 2025-04-09 |
| CVE-2024-43186 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 5.3 | Medium | 2025-03-28 |
| CVE-2024-9418 | SuperAGI 安全漏洞 — transformeroptimus/superagi | 9.8 | - | 2025-03-20 |
| CVE-2025-2355 | BlackVue App 安全漏洞 — App | 3.3 | Low | 2025-03-17 |
| CVE-2024-45638 | IBM Security QRadar 安全漏洞 — QRadar EDR | 4.1 | Medium | 2025-03-14 |
| CVE-2024-10334 | ABB System 800xA 安全漏洞 — System 800xA | 7.3 | High | 2025-02-10 |
| CVE-2023-50945 | IBM Common Licensing 安全漏洞 — Common Licensing | 6.2 | Medium | 2025-01-26 |
| CVE-2024-43659 | iocharger 安全漏洞 — Iocharger firmware for AC models | 6.8 | - | 2025-01-09 |
| CVE-2025-21111 | Dell VxRail 安全漏洞 — Dell VxRail HCI | 7.5 | High | 2025-01-08 |
| CVE-2025-21102 | Dell VxRail 安全漏洞 — Dell VxRail HCI | 7.5 | High | 2025-01-08 |
| CVE-2024-52361 | IBM Storage Defender 安全漏洞 — Storage Defender - Resiliency Service | 5.7 | Medium | 2024-12-18 |
| CVE-2023-50956 | IBM Storage Defender 安全漏洞 — Storage Defender - Resiliency Service | 4.4 | Medium | 2024-12-18 |
| CVE-2024-53292 | Dell VxVerify 安全漏洞 — Dell VxRail HCI | 7.2 | High | 2024-12-11 |
| CVE-2024-11982 | Billion Electric多款产品 安全漏洞 — M100 | 7.2 | High | 2024-11-29 |
| CVE-2024-36464 | Zabbix 安全漏洞 — Zabbix | 2.7 | Low | 2024-11-27 |
| CVE-2024-29978 | Sharp MFP 安全漏洞 — Multiple MFPs (multifunction printers) | 5.9 | Medium | 2024-11-26 |
| CVE-2024-49351 | IBM Workload Scheduler 安全漏洞 — Workload Scheduler | 5.5 | Medium | 2024-11-26 |
| CVE-2024-49370 | Pimcore 安全漏洞 — pimcore | 6.5AI | MediumAI | 2024-10-23 |
| CVE-2024-42496 | Smart-tab 安全漏洞 — Smart-tab Android app | 6.8 | - | 2024-09-30 |
| CVE-2024-31899 | IBM Cognos Command Center 安全漏洞 — Cognos Command Center | 4.3 | Medium | 2024-09-26 |
| CVE-2024-5960 | Eliz Panel 安全漏洞 — Panel | 9.8 | Critical | 2024-09-18 |
| CVE-2024-20489 | Cisco IOS XR 安全漏洞 — Cisco IOS XR Software | 8.4 | High | 2024-09-11 |
| CVE-2024-45283 | SAP NetWeaver AS 安全漏洞 — SAP NetWeaver AS for Java (Destination Service) | 6.0 | Medium | 2024-09-10 |
| CVE-2024-43378 | Calamares Branding and Modules for NixOS 安全漏洞 — calamares-nixos-extensions | 7.8 | High | 2024-08-15 |
| CVE-2024-39922 | Siemens LOGO! 安全漏洞 — LOGO! 12/24RCE | 4.6 | Medium | 2024-08-13 |
| CVE-2024-36460 | Zabbix 安全漏洞 — Zabbix | 8.1 | High | 2024-08-09 |
| CVE-2024-6118 | Hamastar MeetingHub Paperless Meetings 安全漏洞 — MeetingHub Paperless Meetings | 7.8AI | HighAI | 2024-08-05 |
| CVE-2024-37135 | Dell DM5500 安全漏洞 — Data Manager Appliance Software (DMAS) | 3.3 | Low | 2024-07-31 |
| CVE-2024-3082 | Plug and Track Sensor Net Connect 安全漏洞 — Sensor Net Connect V2 | 4.2 | Medium | 2024-07-31 |
| CVE-2024-39733 | IBM Datacap Navigator 安全漏洞 — Datacap Navigator | 5.5 | Medium | 2024-07-14 |
CWE-256（明文存储口令） 是常见的弱点类别，本平台收录该类弱点关联的 171 条 CVE 漏洞。