CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- freebox mini 4k firmware, one firmware, v5 crystal firmware +2 more +4 moreFreebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution...3.5 Low
- general industrial controls lynx+ gatewayGeneral Industrial Controls Lynx+ Gateway Cleartext Transmission of Sensitive Information8.7 High
- bizerba brain2Unencrypted communication to Active Directory services8.4 High
- circutor tcprs1plusEXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXT8.3 High
- nagios log serverNagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext8.7 High
- No product listedAn issue in MikroTik RouterOS v.7.14.2 and SwitchOS v.2.18 allows a remote attacker to execute...10.0 Critical
- No product listedTM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure.9.8 Critical
- efficientlab workexaminer professionalUnencrypted cleartext communication in EfficientLab WorkExaminer Professional7.1 High
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 transmits...3.4 Low
- connectwise automateHTTP Configuration and Encryption in Transit9.6 Critical
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +12 more +14 moreWindows Hello Security Feature Bypass Vulnerability7.7 High
- murrelektronik firmware impact67 pro 54620, firmware impact67 pro 54630, firmware impact67 pro 54631 +1 more +3 moreMurrelektronik: Unprotected Transport of Credentials7.5 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission2.3 Low
- yosmart yolink ecosystemComponents of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to...4.7 Medium
- flocksafety flock safetyThe Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed...6.2 Medium
- ibm aspera http gatewayIBM Aspera HTTP Gateway information disclosure7.5 High
- imonitor software inc. eamUnencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM6.5 Medium
- No product listedCoinomi cleartext transmission6.3 Medium
- lioncoders salepro posLionCoders SalePro POS Login cleartext transmission6.3 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks9.3 Critical
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information8.6 High
- cognex in-sight 2000 series, in-sight 7000 series, in-sight 8000 series +2 more +4 moreAn adjacent attacker without authentication can exploit this vulnerability to retrieve a set of...8.6 High
- dolusoft omaspotSensitive Data Exposure in Dolusoft's Omaspot9.6 Critical
- No product listedAn issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH...8.8 High
- intelbras iwr 3000n firmwareIntelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint....8.4 High
- bender cc612, cc613, icc13xx +2 more +4 moreCleartext Transmission of Sensitive Data via Insecure HTTP Web Interface7.4 High
- mitsubishi electric corporation melsec iq-f series fx5s-30mr/ds, melsec iq-f series fx5s-30mr/es, melsec iq-f series fx5s-30mt/ds +72 more +74 moreInformation Disclosure Vulnerability in MELSEC iQ-F Series CPU module7.5 High
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability6.5 Medium
- No product listedAikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users...8.8 High
- strongdm sdm-cliAuthentication Hijack8.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference4.7 Medium
- santesoft sante pacs serverSantesoft Sante PACS Server Cleartext Transmission of Sensitive Information9.1 Critical
- yugabytedb inc yugabytedbYugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data...7.0 High
- macrozheng mallmacrozheng mall login cleartext transmission6.3 Medium
- eg4 electronics 12000xp, 12kpv, 18kpv +4 more +6 moreEG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information7.5 High
- go-acme legoLego does not enforce HTTPS2.3 Low
- ibm guardium data protectionIBM Guardium Data Protection information disclosure5.9 Medium
- couchbase sync gatewayCouchbase Sync Gateway shows cleartext passwords in redacted and unredacted output7.3 High
- comodo dragonComodo Dragon IP DNS Leakage Detector cleartext transmission6.3 Medium
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by a password in cleartext vulnerability2.6 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by an authorization token sent in cookie vulnerability2.2 Low
- duracomm corporation spm-500 dp-10in-100-muDuraComm DP-10iN-100-MU Cleartext Transmission of Sensitive Information8.7 High
- ibm cognos analytics mobileIBM Cognos Analytics Mobile (iOS) information disclosure5.9 Medium
- motorola smart connect android applicationA vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol...5.1 Medium
- digisol xpon onu wi-fi router (dg-gr6821ac)Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router8.7 High
- red hat ansible automation platform 2, redhat ansible automation platform +1 moreAap: sensitive cookie(s) set without security flags3.1 Low
- No product listedEcovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process.7.5 High
- endress meac300-fnade4 firmware, endress+hauser meac300-fnade4 +1 moreCVE-2025-274576.5 Medium
- ibm infosphere information serverIBM InfoSphere DataStage Flow Designer information disclosure5.3 Medium
- kaleris navis n4Cleartext Transmission of Sensitive Information in Kaleris Navis N46.0 Medium
- Show moreLoading…