Skip to content
Noroxi

CWE-311 · 463 records

Missing Encryption of Sensitive Data

CVEs in this class

463 records

  • CVE-2026-34486
    90Now

    Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

    HighCVSS 7.5KEVWeaponizedEPSS 98%

    apache · tomcatApr 9, 2026

  • CVE-2019-11367
    40Plan

    An issue was discovered in AUO Solar Data Recorder before 1.3.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    auo · solar data recorderJun 3, 2019

  • CVE-2018-10698
    40Plan

    An issue was discovered on Moxa AWK-3121 1.14 devices.

    CriticalCVSS 9.8No exploitEPSS 2%

    moxa · awk-3121 firmwareJun 7, 2019

  • CVE-2019-0307
    40Plan

    Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communicat

    LowCVSS 2.4WeaponizedEPSS 2%

    sap · solution managerJun 12, 2019

  • CVE-2017-9854
    39Monitor

    An issue was discovered in SMA Solar Technology products.

    CriticalCVSS 9.8No exploitEPSS 1%

    sma · sunny boy 3600 firmwareAug 5, 2017

  • CVE-2018-13992
    39Monitor

    The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by

    CriticalCVSS 9.8No exploitEPSS 1%

    phoenixcontact · fl switch 3005 firmwareMay 7, 2019

  • CVE-2018-16879
    39Monitor

    Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for mess

    CriticalCVSS 9.8No exploitEPSS 1%

    redhat · ansible towerJan 3, 2019

  • CVE-2018-17915
    39Monitor

    All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication.

    CriticalCVSS 9.8No exploitEPSS 1%

    xiongmaitech · xmeye p2p cloud serverOct 10, 2018

  • CVE-2019-6526
    39Monitor

    Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A se

    CriticalCVSS 9.8No exploitEPSS 0%

    moxa · iks-g6824a firmwareApr 15, 2019

  • CVE-2019-12924
    39Monitor

    MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthentica

    CriticalCVSS 9.8No exploitEPSS 0%

    mailenable · mailenableJul 8, 2019

  • CVE-2020-15331
    39Monitor

    Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess.

    CriticalCVSS 9.8No exploitEPSS 0%

    zyxel · cloudcnm secumanagerSep 28, 2022

  • CVE-2018-20100
    39Monitor

    An issue was discovered on August Connect devices.

    CriticalCVSS 9.8No exploitEPSS 0%

    august · august connectJan 2, 2019

  • CVE-2018-7498
    39Monitor

    In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity

    CriticalCVSS 9.8No exploitEPSS 0%

    philips · alice 6 firmwareMar 28, 2018

  • CVE-2020-35168
    39Monitor

    Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Tim

    CriticalCVSS 9.8No exploitEPSS 0%

    dell · bsafe crypto-c-micro-editionJul 11, 2022

  • CVE-2017-9632
    39Monitor

    A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, al

    CriticalCVSS 9.8No exploitEPSS 0%

    pdqinc · laserwash g5 firmwareAug 7, 2017

  • CVE-2019-3431
    39Monitor

    All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability.

    CriticalCVSS 9.8No exploitEPSS 0%

    zte · zxcloud goldendata vapDec 23, 2019

  • CVE-2026-20157
    39Monitor

    Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 0%

    cisco · roomosJul 15, 2026

  • CVE-2023-6339
    39Monitor

    Google Nest WiFi Pro root code-execution & user-data compromise

    CriticalCVSS 9.8No exploitEPSS 0%

    google · nest wifi pro firmwareJan 2, 2024

  • CVE-2025-69969
    38Monitor

    A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebb

    CriticalCVSS 9.6No exploitEPSS 0%

    pebblepower · pebble prism ultra firmwareMar 4, 2026

  • CVE-2026-81681
    37Monitor

    openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage

    CriticalCVSS 9.3No exploitEPSS 0%

    jahlives · openssl encryptAug 27, 2026

  • CVE-2026-77812
    37Monitor

    Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

    CriticalCVSS 9.4Proof of conceptEPSS 0%

    dji · neoAug 21, 2026

  • CVE-2025-36751
    37Monitor

    Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X

    CriticalCVSS 9.4No exploitEPSS 0%

    growatt · shinelan-xDec 13, 2025

  • CVE-2020-12032
    36Monitor

    Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in

    CriticalCVSS 9.1No exploitEPSS 0%

    baxter · em2400 firmwareJun 29, 2020

  • CVE-2021-27779
    36Monitor

    A Security Misconfiguration vulnerability affects HCL VersionVault Express

    CriticalCVSS 9.1No exploitEPSS 0%

    hcltech · versionvault expressMay 25, 2022

  • CVE-2024-29151
    36Monitor

    Rocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.

    CriticalCVSS 9.1No exploitEPSS 0%

    Mar 18, 2024

All vulnerability classes