Skip to content
Noroxi

CWE-319 · 823 records

Cleartext Transmission of Sensitive Information

CVEs in this class

824 records

  • CVE-2018-12710
    55Plan

    An issue was discovered on D-Link DIR-601 2.02NA devices.

    HighCVSS 8.0Proof of conceptEPSS 77%

    dlink · dir-601 firmwareAug 29, 2018

  • CVE-2024-25735
    51Plan

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.

    CriticalCVSS 9.1Proof of conceptEPSS 51%

    wyrestorm · apollo vx20 firmwareMar 26, 2024

  • CVE-2016-5649
    46Plan

    Netgear DGN2200 and DGND3700 disclose the administrator password

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    netgear · dgn2200 firmwareJul 24, 2018

  • CVE-2018-1297
    42Plan

    When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection.

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    apache · jmeterFeb 13, 2018

  • CVE-2021-20623
    40Plan

    Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a speci

    CriticalCVSS 9.8No exploitEPSS 3%

    panasonic · video insight vmsFeb 5, 2021

  • CVE-2019-17393
    40Plan

    The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can be sniffed by unauth

    CriticalCVSS 9.8No exploitEPSS 2%

    tomedo · serverOct 18, 2019

  • CVE-2022-21829
    40Plan

    Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which c

    CriticalCVSS 9.8No exploitEPSS 2%

    concretecms · concrete cmsJun 24, 2022

  • CVE-2025-4378
    40Plan

    Hardcoded Credentials in Ataturk University's ATA-AOF Mobile Application

    CriticalCVSS 10.0No exploitEPSS 0%

    ataturk university · ata-aof mobile applicationJun 24, 2025

  • CVE-2025-47419
    40Plan

    Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic.

    CriticalCVSS 10.0No exploitEPSS 0%

    crestron · automate vxMay 6, 2025

  • CVE-2026-22306
    40Plan

    Critical flaw impacting OZOLS ERP's automatic update channel

    CriticalCVSS 10.0No exploitEPSS 0%

    ozols grupa · ozolsAug 19, 2026

  • CVE-2023-25437
    39Monitor

    An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive inf

    HighCVSS 8.8No exploitEPSS 14%

    vtech · vcs754a firmwareApr 27, 2023

  • CVE-2019-18852
    39Monitor

    Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config

    CriticalCVSS 9.8No exploitEPSS 2%

    dlink · dir-600 b1 firmwareNov 11, 2019

  • CVE-2020-5594
    39Monitor

    Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmissi

    CriticalCVSS 9.8No exploitEPSS 1%

    mitsubishielectric · melsec iq-r firmwareJun 23, 2020

  • CVE-2019-16672
    39Monitor

    An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161

    CriticalCVSS 9.8No exploitEPSS 1%

    weidmueller · ie-sw-pl09m-5gc-4gt firmwareDec 6, 2019

  • CVE-2020-9477
    39Monitor

    An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices.

    CriticalCVSS 9.8No exploitEPSS 1%

    humaxdigital · hga12r-02 firmwareMar 4, 2020

  • CVE-2023-33730
    39Monitor

    Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remot

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    escanav · escan management consoleMay 31, 2023

  • CVE-2020-10376
    39Monitor

    Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Bas

    CriticalCVSS 9.8No exploitEPSS 1%

    technicolor · tc7337net firmwareMar 11, 2020

  • CVE-2018-11422
    39Monitor

    Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary configuration protocol that does not provide confidenti

    CriticalCVSS 9.8No exploitEPSS 1%

    moxa · oncell g3150-hspa firmwareJul 3, 2019

  • CVE-2018-7259
    39Monitor

    The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://installLog.flightsimlabs.

    CriticalCVSS 9.8No exploitEPSS 1%

    flightsimlabs · a320-xFeb 19, 2018

  • CVE-2022-33321
    39Monitor

    Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Elec

    CriticalCVSS 9.8No exploitEPSS 1%

    mitsubishielectric · mac-557if-e firmwareNov 8, 2022

  • CVE-2020-25190
    39Monitor

    MOXA NPort IAW5000A-I/O Series

    CriticalCVSS 9.8No exploitEPSS 1%

    moxa · nport iaw5000a-i\/o firmwareDec 23, 2020

  • CVE-2020-12040
    39Monitor

    Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the applicati

    CriticalCVSS 9.8No exploitEPSS 1%

    baxter · sigma spectrum infusion system firmwareJun 29, 2020

  • CVE-2018-11421
    39Monitor

    Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiali

    CriticalCVSS 9.8No exploitEPSS 1%

    moxa · oncell g3150-hspa firmwareJul 3, 2019

  • CVE-2019-15911
    39Monitor

    An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO.

    CriticalCVSS 9.8No exploitEPSS 1%

    asus · hg100 firmwareDec 20, 2019

  • CVE-2019-5505
    39Monitor

    ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext.

    CriticalCVSS 9.8No exploitEPSS 1%

    netapp · ontap select deploy administration utilitySep 24, 2019

All vulnerability classes