CWE-311: Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- hcl aion HCL AION is affected by multiple security vulnerabilities. 3.7 Low
- hcl aion HCL AION is affected by multiple security vulnerabilities. 3.7 Low
- hcl aion HCL AION is affected by multiple security vulnerabilities. 5.4 Medium
- grokability snipe-it Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store 5.3 Medium
- subhajitkhan online-clinic-management-system subhajitkhan online-clinic-management-system patientregistration.php missing encryption 5.3 Medium
- advantech adam-3600 A vulnerability could allow an attacker with access to an encrypted project file to retrieve... 6.3 Medium
- aio-libs aiohttp AIOHTTP: Secure attribute not enforced for shared cookie 6.3 Medium
- dell application installer, Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of... 6.2 Medium
- sourcecodester drug recommendation system SourceCodester Drug Recommendation System Password add_user.php missing encryption 5.1 Medium
- No product listed An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of... 7.8 High
- mongodb entity framework core provider Malformed connection string may disable field level encryption 6.8 Medium
- mongodb entity framework core provider Combining encryption settings may disable encryption 6.8 Medium
- jenkins project parameterized remote trigger plugin Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job... 4.3 Medium
- jahlives openssl encrypt openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256 8.7 High
- jahlives openssl encrypt openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage 9.3 Critical
- dji air 3, air 3s, avata 2 +13 more +15 more Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE 9.4 Critical
- trendnet tew-wlc100 TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption 6.3 Medium
- No product listed CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents,... 7.5 High
- samsung smart switch Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent... 7.0 High
-
aws-cdk-libnpm,Amazon.CDK.AWS.CodeBuildNuGet,Amazon.CDK.LibNuGet +6 more +8 more AWS CDK CodeBuild S3 Log Encryption Boolean Inversion 3.3 Low - cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities 7.5 High
- No product listed Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book... 7.5 High
- corewcf CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality 7.4 High
- guzzle Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext 5.9 Medium
- jenkins Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations 5.3 Medium
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 more Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor 7.5 High
- antrea-io antrea Missing Encryption of Sensitive Data in antrea.io/antrea 7.1 High
- openvessl anchorr Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS 9.1 Critical
- nginxui nginx ui, 0xjacky nginx-ui +1 more Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure 9.8 Critical
- pebblepower pebble prism ultra firmware A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer t… 9.6 Critical
- tp-link systems inc. vx800v v1.0, tp-link vx800v firmware +1 more Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v 5.3 Medium
- typebot, baptistearno typebot.io +1 more Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass 7.4 High
- lenovo thinkplus fu100, thinkplus fu200, thinkplus tsd303 +5 more +7 more A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with... 5.1 Medium
- kings information & network co. kess enterprise Data Exposure in Kings Information & Network KESS Enterprise 8.6 High
- growatt shinelan-x Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X 9.4 Critical
- asustor adm, data master +1 more A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM 7.0 High
- meatmeet pro wifi \& bluetooth meat thermometer firmware The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical... 4.6 Medium
- jenkins curseforge publisher, jenkins project curseforge publisher plugin +1 more Jenkins Curseforge Publisher Plugin does not mask API Keys displayed on the job configuration form 4.3 Medium
- jenkins curseforge publisher, jenkins project curseforge publisher plugin +1 more Jenkins Curseforge Publisher Plugin stores API Keys unencrypted in job config.xml files 4.3 Medium
- jenkins byteguard build actions, jenkins project byteguard build actions plugin +1 more Jenkins ByteGuard Build Actions Plugin does not mask API tokens displayed on the job configuration form 4.3 Medium
- jenkins byteguard build actions, jenkins project byteguard build actions plugin +1 more Jenkins ByteGuard Build Actions Plugin stores API tokens unencrypted in job config.xml files 4.3 Medium
- jenkins openshift pipeline, jenkins project openshift pipeline plugin +1 more Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files 4.3 Medium
- compugroup medical cgm medico An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows... 8.6 High
- dragonflyoss dragonfly Dragonfly tiny file download uses hard coded HTTP protocol 5.5 Medium
- axxonsoft axxon one, axxonone c-werk +1 more Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8 5.1 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 more A cryptographic weakness has been identified in the HCL BigFix Service Management (SM) 5.3 Medium
- bosch rexroth ag ctrlx os - setup Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to... 7.1 High
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 more A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=... 5.9 Medium
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 more A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=... 2.0 Low
- ruijie eg306mg Ruijie EG306MG strongSwan strongswan.conf missing encryption 6.3 Medium
- Show olderLoading…