CWE-311: Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm security verify governanceIBM Security Verify Governance information disclosure5.9 Medium
- ciliumCilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies6.1 Medium
- ciliumCilium has possible unencrypted traffic between nodes when using IPsec and L7 policies6.1 Medium
- rocket chat auditRocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.9.1 Critical
- ibm watson cp4d data storesIBM Watson CP4D Data Stores information disclosure4.5 Medium
- samsung exynos 1080, exynos 1280, exynos 1330 +23 more +25 moreAn issue was discovered in Samsung Mobile Processor, Automotive Processor, Wearable Processor,...5.3 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security information disclosure5.9 Medium
- b&r industrial automation automation studio, technology guarding +1 moreB&R products use insufficient communication encryption8.3 High
- ciliumUnencrypted traffic between pods when using Wireguard and an external kvstore6.1 Medium
- ciliumCilium has unencrypted ingress/health traffic when using Wireguard transparent encryption6.1 Medium
- comarch erp xlProtocol Downgrade in Comarch ERP XL7.4 High
- 1panel-dev 1panel1Panel set-cookie is missing the Secure keyword6.5 Medium
- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Appliance information disclosure6.2 Medium
- flient smart lock advanced firmwareMissing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create...6.5 Medium
- hozard alarm systemMissing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow...6.5 Medium
- google wifi pro, nest wifi pro firmware +1 moreGoogle Nest WiFi Pro root code-execution & user-data compromise10.0 Critical
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +81 more +83 moreCryptographic Issues in Automotive7.1 High
- curl, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.9 Medium
- huawei emui, harmonyos +1 moreVulnerability of missing encryption in the card management module. Successful exploitation of...7.5 High
- solarwinds network configuration managerSolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability4.5 Medium
- silabs.com ember znet sdk, silabs emberznet sdk +1 moreKeys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices6.8 Medium
- silabs openthread sdkKeys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices6.8 Medium
- ibm security verify governanceIBM Security Verify Governance information disclosure4.1 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.3 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.3 Medium
- ibm security directory server, security directory integrator, security directory suite +1 more +3 moreIBM Security Directory Server information disclosure5.3 Medium
- qnap qvpn, qnap systems inc. qvpn windows +1 moreQVPN Device Client5.2 Medium
- schollz crocCroc requires senders to provide local IP addresses in cleartext5.3 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- ibm security verify information queueIBM Security Verify Information Queue information disclosure2.9 Low
- mozilla firefox, firefox esr, thunderbird +2 morePush notifications saved to disk unencrypted6.5 Medium
- sick lms5xx, lms500 firmware, lms511 firmware +1 more +3 moreA remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to...9.8 Critical
- genians genian nac suite v5.0, genian nac v4.0, genian nac v5.0 +2 more +4 moreMissing Encryption of Sensitive DataCAPEC- vulnerability in Genians Genian NAC V4.0, Genians...5.2 Medium
- maximatech portal executivoMaximaTech Portal Executivo Cookie missing encryption3.7 Low
- sulimet 5-in-1 smart door lock firmwareMissing encryption in the RFID tag of Suleve 5-in-1 Smart Door Lock v1.0 allows attackers to...2.4 Low
- mydigoo dg-hamb smart home security system firmwareMissing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows...2.4 Low
- etekcity 3-in-1 smart door lock firmwareMissing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to...4.6 Medium
- kiteworks security-advisories, nextcloud user oidc +1 moreuser_oidc app stores client secret unencrypted in database3.8 Low
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels4.9 Medium
- mindsdbMindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue9.1 Critical
- xithrius twitch-tuitwitch-tui's connection is not encrypted7.5 High
- bd alaris 8015 pcu firmware, becton dickinson & co bd alarisâ„¢ point-of-care unit (pcu) model 8015 +1 moreLack of Cryptographic Security of IUI Bus6.1 Medium
- inageyaAn issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive...7.5 High
- entetsu storeAn issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive...7.5 High
- shizutetsu storeAn issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive...7.5 High
- keisei store livreAn issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain...7.5 High
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin vulnerable to Active Directory credential disclosure5.9 Medium
- bitcoin coreMemory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored...7.5 High
- Show moreLoading…