CWE-311: Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- macacajs macaca-chromedriver, hackerone macaca-chromedriver node module +1 moreDownloads Resources over HTTP in macaca-chromedriver8.1 High
- dalekjs, hackerone dalek-browser-chrome-canary node module +1 moreDownloads Resources over HTTP in dalek-browser-chrome-canary8.1 High
- unicode project unicode, hackerone unicode node module +1 moreDownloads Resources over HTTP in unicode8.1 High
- ibm db, hackerone ibm db node module +1 moreibm_db downloads Resources over HTTP8.1 High
- baryton-saxophone project baryton-saxophone, hackerone baryton-saxophone node module +1 moreDownloads Resources over HTTP in baryton-saxophone8.1 High
- pngcrush-installer project pngcrush-installer, hackerone pngcrush-installer node module +1 morepngcrush-installer downloads Resources over HTTP8.1 High
- geoip-lite-country project geoip-lite-country, hackerone geoip-lite-country node module +1 moreDownloads Resources over HTTP in geoip-lite-country8.1 High
- product-monitor project product-monitor, hackerone product-monitor node module +1 moreDownloads Resources over HTTP in product-monitor8.1 High
- install-nw project install-nw, hackerone install-nw node module +1 moreinstall-nw downloads Resources over HTTP8.1 High
- groupon selenium-download, hackerone selenium-download node module +1 moreDownloads Resources over HTTP in selenium-download8.1 High
- aerospike, hackerone aerospike node module +1 moreDownloads Resources over HTTP in aerospike8.1 High
- acoustic technology, inc. (ati systems) ati emergency mass notification systems, atisystem alert4000 firmware, hpss16 firmware +2 more +4 moreIn ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices...3.1 Low
- mcafee virusscan enterprise, mcafee, llc virusscan enterprise (vse) +1 morePrivilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges6.8 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through by user submitting an embedded form. This...6.5 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...7.5 High
- medtronic n'vision clinician programmer, 8870 n’vision removable application card, n\'vision 8840 firmware +1 more +3 moreMedtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data4.6 Medium
- mimobaby mimo baby 2 firmwareMimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE)...5.3 Medium
- boston scientific zoom latitude prm, bostonscientific zoom latitude prm 3120 firmware +1 moreBoston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score:...4.6 Medium
- abbott laboratories accent and anthem, abbott accent firmware, accent mri firmware +2 more +4 moreAbbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit...6.5 Medium
- siemens simatic wincc oa operator, siemens ag simatic wincc oa operator ios app +1 moreA vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4)....4.6 Medium
- philips alice 6 system, alice 6 firmware +1 moreIn Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up...9.8 Critical
- insteon hub firmwareIn version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for...8.1 High
- google chrome osInappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a...7.4 High
- flexense diskbossAn issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext...8.1 High
- liveqos superbeamSuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or...7.5 High
- hikvision ds-2cd2432f-iw firmware** DISPUTED ** HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically...6.5 Medium
- huawei fusionsphere openstackFusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information...4.3 Medium
- writediary diary with lockIn the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other...7.5 High
- octopus deployOctopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a...7.5 High
- kaspersky internet security, kaspersky lab kaspersky internet security for android 11.12.4.1622 +1 moreIn Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were...7.5 High
- pdqinc laserjet firmware, laserwash 360 firmware, laserwash 360 plus firmware +8 more +10 moreA Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and...9.8 Critical
- sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more** DISPUTED ** An issue was discovered in SMA Solar Technology products. By sniffing for specific...9.8 Critical
- ismartalarm cubeone firmwareOn iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted...7.5 High
- dlink dir-615The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages....9.8 Critical
- acronis true imageAcronis True Image up to and including version 2017 Build 8053 performs software updates using...8.8 High
- samsung magicianSamsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior...8.8 High
- kde kmail, messagelib +1 moreKDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17...7.5 High
- google i\/o 2017The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http...5.9 Medium
- whatsapp** DISPUTED ** Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for...4.6 Medium
- postgresqlIn PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6...5.9 Medium
- wificam wireless ip camera \(p2p\) firmwareWireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud...7.5 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreCast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...5.7 Medium
- openelecThe auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and...8.1 High
- mikrotik routerosThe L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption...5.9 Medium
- sensys networks vsn240-f, vsn240-t, sensysnetworks trafficdot +1 more +3 moreSensys Networks Traffic Sensor Missing Encryption of Sensitive Data4.3
- wellintech kingscada, kingview +1 moreWellinTech KingSCADA Missing Encryption of Sensitive Data7.1
- lindenlab second lifeThe login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol...7.5 High