CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- weave gitops, weaveworks weave-gitops +1 moreWeave Gitops Run vulnerable to insecure communication7.4 High
- apache james, apache software foundation james server +1 moreApache James server: Temporary File Information Disclosure5.5 Medium
- hitachi energy foxman-un, unem +1 moreCommunication between the client and server partially using CORBA over TCP/IP8.3 High
- pyload, pyload pyload/pyload +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload3.1 Low
- usememos memos, usememos/memos +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos4.3 Medium
- ibm security verify governance, identity manager, security verify governance +1 moreIBM Security Verify Governance, Identity Manager information disclosure5.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol...4.7 Medium
- mozilla firefoxWhen clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be...8.8 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 High
- hcl software bigfix insights for vulnerability remediationHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation6.4 Medium
- unspecified whohaswhohas Package Information cleartext transmission3.7 Low
- ibm spectrum protect plusIBM Spectrum Protect Plus information disclosure6.8 Medium
- arcadyan vrv9506jac23 firmwareThe login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is...6.5 Medium
- siemens sicam pas/pqs, sicam pas\/pqs +1 moreA vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software...9.8 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq6.3 Medium
- openharmonyPIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.8.3 High
- secu secustation firmwareIn certain Secustation products the administrator account password can be read. This affects V2.5...4.9 Medium
- gitea, jenkins project gitea plugin +1 moreJenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information4.3 Medium
- telepadTelepad allows an attacker (in a man-in-the-middle position between the server and a connected...5.9 Medium
- lazy mouse project mouse, thisaay lazy mouse +1 moreLazy Mouse allows an attacker (in a man in the middle position between the server and a connected...5.9 Medium
- beappsmobile pc keyboard wifi & bluetooth, pc keyboard wifi \& bluetooth +1 morePC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the...5.9 Medium
- web based quiz system project based quiz systemWeb Based Quiz System v1.0 transmits user passwords in plaintext during the authentication...7.5 High
- nextcloud openid connect user backend, kiteworks security-advisories +1 moreCleartext Transmission of Sensitive Information in user_oidc4.3 Medium
- solarwinds engineer's toolset, engineer\'s toolset +1 moreUnprotected Transport of Credentials (HSTS) Vulnerability5.3 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cleartext Transmission of Sensitive Information5.3 Medium
- xiongmaitech xm-jpr2-lx firmwareXiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text...5.3 Medium
- powercom co., ltd. upsmon proPOWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information7.5 High
- mitsubishi electric corporation air conditioning mfz-gxt50/60/73vfk, air conditioning mfz-xt50/60vfk, air conditioning msxy-fp05/07/10/13/18/20/24vgk-sg1 +452 more +454 moreCleartext Transmission of Sensitive Information vulnerability due to the use of Basic...9.8 Critical
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation information disclosure5.3 Medium
- ibm security guardiumIBM Security Guardium information disclosure4.4 Medium
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 morePentaho Business Analytics Server - With the Data Lineage feature enabled, the system transmits database passwords in clear text7.7 High
- haascnc haas controller, haas cnc controller +1 moreCommunication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20...9.1 Critical
- alivecor kardiamobile, kardiamobile 6l firmware, kardiamobile card firmware +1 more +3 moreThe physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal...4.8 Medium
- haxx curl, apple macos, fedoraproject fedora +4 more +6 moreIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 High
- free5gcFree5gc v3.2.1 is vulnerable to Information disclosure.7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP TMM Vulnerability CVE-2022-419833.7 Low
- passster project passsterPassster < 3.5.5.5.2 - Insecure Storage of Password5.9 Medium
- tiny-csrf project tiny-csrfPlaintext transmission of CSRF tokens in tiny-csrf8.1 High
- teluu pjsip, pjsip pjproject +1 moreMedia transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip9.1 Critical
- rocket.chatA cleartext transmission of sensitive information exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5...6.5 Medium
- digitaldruid hoteldruidHotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session...3.7 Low
- espocrmEspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain...5.9 Medium
- honeywell trend iq411 firmware, trend iq412 firmware, trend iq422 firmware +2 more +4 moreThe Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive...6.5 Medium
- simple sign on project sign on, unknown simple single sign on +1 moreSimple Single Sign On <= 4.1.0 - Authentication Bypass7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0...8.1 High
- automationdirect sio- mb04ads, sio-mb04ads, sio-mb04ads firmware +18 more +20 moreAutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information9.6 Critical
- automationdirect directlogic d0-06 series cpus, d0-06aa firmware, d0-06ar firmware +7 more +9 moreAutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission7.7 High
- automationdirect c-more ea9, c-more ea9-pgmsw firmware, c-more ea9-rhmi firmware +10 more +12 moreAutomationDirect C-more EA9 HMI Cleartext Transmission7.5 High
moment-timezonenpmCommand Injection in moment-timezoneNo score- fiberhome hg150-ub firmwareIn FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be...7.5 High
- Show moreLoading…