CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- go-vikunja vikunja Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery 7.6 High
- shenzhen shine industrial co., ltd. vitafit VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config 5.1 Medium
- devolutions server Cleartext transmission of sensitive information in the email configuration test in Devolutions... 6.5 Medium
- libressl LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host() 6.3 Medium
- watchguard mobile vpn with ssl client Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket 5.7 Medium
- fclairamb ftpserverlib, syncplify, inc. syncplify server! +1 more Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P 6.3 Medium
- wolfvision cynap pro, cynap core pro Unauthorized Access to vSolution Matrix RTSP 7.1 High
- yoosee gm8135s camera Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission 6.3 Medium
- No product listed HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission 6.3 Medium
- grokability snipe-it Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() 8.2 High
- rclone Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url 6.0 Medium
- siyuan-note siyuan SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting 7.6 High
- tenda f6 Tenda F6 Web Management cleartext transmission 6.3 Medium
- intersystems iris for health InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information 9.2 Critical
- authlib Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts 2.6 Low
- hcl software appscan integration with azure boards for asoc & a360 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) 2.2 Low
- girafit camera app Girafit Camera App 1.9.1 Hardcoded TURN Credentials Disclosure 6.9 Medium
- gaijin entertainment war thunder War Thunder Account Impersonation 4.8 Medium
- autodesk adp desktop sdk Cleartext Transmission of Sensitive Information in ADP Desktop SDK 7.5 High
- ibm aspera enterprise webapps IBM Aspera Enterprise Webapps Information Disclosure 5.1 Medium
- progress software corporation marklogic server Cleartext transmission in Progress MarkLogic Server Amazon S3 connections 7.5 High
- progress software corporation marklogic server Cleartext transmission in Progress MarkLogic Server cluster join operations 7.4 High
- punkpeye mcp-remote mcp-remote 0.8.0 through 0.14.3 Cleartext Credential Transmission via --device-code OAuth Grant 6.0 Medium
- python-mechanize mechanize Mechanize sends credential headers to a different scheme or port after a redirect 5.9 Medium
- progressive robot ltd hmailserver Cleartext Transmission of Sensitive Information in hMailServer 7.4 High
- asynchttpclient async-http-client AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel 5.9 Medium
- asynchttpclient async-http-client AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host 9.4 Critical
- asynchttpclient async-http-client AsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECT 7.5 High
- asynchttpclient async-http-client AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext 8.7 High
- red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downgrade 6.5 Medium
- chainguard academy (edu) Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP 2.3 Low
- sgl-project sglang sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission 6.3 Medium
- geovision inc. gv-eye GV-Eye Sensitive information exposure in URL query parameter Vulnerability 7.5 High
- johnson controls easyio neo - Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO... 7.3 High
- docker engine, moby +1 more Docker Engine insecure-registry fallback via malicious DNS responses 7.6 High
- teledyne flir aware2 Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2 8.5 High
- teledyne flir aware2 Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2 5.3 Medium
- teledyne flir aware2 Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2 9.4 Critical
- joyland joyland.ai Joyland AI enables HTTP 5.3 Medium
- hcl software bigfix service management HCL BigFix Service Management is affected by multiple security vulnerabilities. 7.4 High
- hitachi industrial equipment systems coding software suite Authentication information or sensitive data may be intercepted in transit 8.7 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 more Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a... 5.9 Medium
- universal-tool-calling-protocol python-utcp utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL 2.3 Low
- siyuan-note siyuan SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie 8.2 High
- botslab g980h Botslab G980H Dashcams Cleartext Transmission of Sensitive Information 7.1 High
- sfturing hosp order sfturing hosp_order MailUtil.java getProperties cleartext transmission 6.3 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 more IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities 7.4 High
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 more IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities 7.5 High
- bransys eld Cleartext Transmission of Sensitive Information in Bransys ELD 8.2 High
- ibm controller Multiple vulnerabilities in IBM Controller 5.9 Medium
- Show olderLoading…