CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a...8.6 High
- vgate icar 2 wi-fi obd2 firmwareAn issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent...6.5 Medium
- simplisafe u9k-kp1000 firmwareSimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate...6.6 Medium
- simplisafe u9k-es1000 firmware, u9k-kr1 firmware, u9k-ms1000 firmware +1 more +3 moreSimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate...4.3 Medium
- schneider electric se ampla mes, schneider-electric ampla manufacturing execution system +1 moreSchneider Electric Ampla MES 6.4 provides capability to interact with data from third party...4.1 Medium
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- abbott laboratories accent and anthem, abbott accent firmware, accent mri firmware +2 more +4 moreAbbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit...6.5 Medium
- schneider electric se 66074 mge network management card transverse installed in mge ups and mge sts, schneider-electric 66074 mge network management card transverse +1 moreA cleartext transmission of sensitive information vulnerability exists in Schneider Electric's...9.8 Critical
- huawei technologies co., ltd. honor 8 lite, huawei honor 8 lite firmware +1 moreThe Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague...5.3 Medium
- cisco spark hybrid calendar serviceA vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an...7.5 High
- gitlab, debian linux, gitlab community and enterprise editions +2 moreGitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential...7.2 High
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreUnencrypted way of remote control and communications in Hanwha Techwin Smartcams9.8 Critical
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreA Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS,...5.9 Medium
- samsung display solutionsSamsung Display Solutions App before 3.02 for Android allows man-in-the-middle attackers to spoof...5.9 Medium
- eq-3 homematic central control unit ccu2 firmwareIn /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software...8.1 High
- flightsimlabs a320-xThe FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account...9.8 Critical
- apache jmeterMissing certificate validation in Apache JMeter9.8 Critical
- tinderFixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to...9.1 Critical
- tinderUnencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to...9.1 Critical
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content...6.5 Medium
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreIn versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root...8.8 High
- ibm integration busIBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be...8.1 High
- vibease chat, wireless remote vibrator +1 moreThe Vibease Wireless Remote Vibrator app for Android and the Vibease Chat app for iOS use...7.5 High
- nq contacts backup \& restoreIn the "NQ Contacts Backup & Restore" application 1.1 for Android, no HTTPS is used for...9.8 Critical
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security...5.9 Medium
- apple supportAn issue was discovered in certain Apple products. The Apple Support app before 1.2 for iOS is...5.3 Medium
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue...5.5 Medium
- apple iphone osAn issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves...7.5 High
- apple iphone os, mac os x +1 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13...5.3 Medium
- prominent multiflex m10a controller firmwareAn Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface...6.5 Medium
- mirasys video management systemMirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1...7.5 High
- golang goAn unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires...5.9 Medium
- elastic cloud enterpriseThe client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt...5.9 Medium
- cisco ios, ios xe +1 moreA vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE...6.5 Medium
- ibm tivoli monitoring, tivoli monitoring v6 +1 moreIBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges...7.0 High
- gnome shotwellShotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information...7.5 High
- apache impalaDuring a routine security analysis, it was found that one of the ports in Apache Impala ...7.5 High
- trendmicro serverprotectTrend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper...7.4 High
- oneplus oxygenosAn issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the...5.9 Medium
- oneplus oxygenosAn issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script...5.9 Medium
- oracle mysql, oracle corporation mysql server, debian linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API)....5.3 Medium
- apple iphone osAn issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue...5.9 Medium
- cisco telepresence server, telepresence server software +1 moreAn API Privilege vulnerability in Cisco TelePresence Server Software could allow an...5.3 Medium
- typo3TYPO3 Information Disclosure Vulnerability5.3 Medium
- dahuasecurity nvr firmwareAn issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The...8.1 High
- kde kdelibs, kio +1 morekpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL...5.5 Medium
- dahuasecurity camera firmware, nvr firmware, smartpss firmware +2 moreDahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400...5.9 Medium
- portaudio project portaudioSource code is downloaded over cleartext HTTP in portaudio5.9 Medium
- aquamaniac gwenhywfar, libgwenhywfar, debian linux +1 more +3 moreAn issue exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA...5.3 Medium
- Show moreLoading…