CWE-311

508 vulnerabilities with CWE-311

CVE-2026-53442 MEDIUM

Jenkins - Missing Encryption of Sensitive Data

CVSS 5.3

CVE-2026-34486 HIGH

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

CVSS 7.5

CVE-2026-34992 HIGH

Missing Encryption of Sensitive Data in antrea.io/antrea

CVSS 7.5

CVE-2026-32891 CRITICAL

Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

CVSS 9.0

CVE-2026-28678 HIGH

DSA Study Hub < 2026-02-21 - Insufficiently Protected Credentials in JWT Cookie Storage

CVSS 8.1

CVE-2026-27944 CRITICAL

nginxui/nginx_ui < 2.3.3 - Unauthenticated Sensitive Data Exposure via Backup Endpoint

CVSS 9.8

CVE-2025-69969 CRITICAL

SRK Powertech Pebble Prism Ultra 2.9.2 - Command Injection

CVSS 9.6

CVE-2025-15548 MEDIUM

TP-Link VX800v Firmware < 800.0.18 - Missing Encryption of Sensitive Data in Web Interface

CVSS 6.5

CVE-2025-65098 HIGH

typebot < 3.13.2 - Unauthenticated Credential Theft via Malicious Typebot Preview

CVSS 7.4

CVE-2025-13453 MEDIUM

Lenovo ThinkPlus FU100 FU200 TU800 TSD303 - Unprotected User Data Exposure via Missing Encryption

CVSS 4.6

CVE-2025-15065 MEDIUM

Kings Information & Network Co. KESS Enterprise <*.25.9.19.exe - Pr...

CVSS 6.3

CVE-2025-36751 CRITICAL

Growatt ShineLan-X/MIC 3300TL-X - Info Disclosure

CVE-2025-13053 LOW

ASUSTOR Data Master 4.1.0-4.3.3.ROF1 - Missing TLS Certificate Validation in UPS Configuration

CVSS 3.7

CVE-2025-65825 MEDIUM

Meatmeet Pro WiFi & Bluetooth Meat Thermometer Firmware - Unprotected Credential Exposure via Unencrypted Firmware

CVSS 4.6

CVE-2025-64147 MEDIUM

Jenkins Curseforge Publisher Plugin 1.0 - Sensitive Data Exposure via Unmasked API Keys

CVSS 4.3

CVE-2025-64146 MEDIUM

Jenkins Curseforge Publisher Plugin 1.0 - Unencrypted API Key Storage in config.xml

CVSS 4.3

CVE-2025-64145 MEDIUM

Jenkins ByteGuard Build Actions Plugin 1.0 - Sensitive Data Exposure via Unmasked API Tokens

CVSS 4.3

CVE-2025-64144 MEDIUM

Jenkins ByteGuard Build Actions Plugin 1.0 - Unencrypted API Token Storage in Job Configuration

CVSS 4.3

CVE-2025-64143 MEDIUM

Jenkins OpenShift Pipeline Plugin <= 1.0.57 - Unencrypted Authorization Token Storage in config.xml

CVSS 4.3

CVE-2025-48981 HIGH

CGM MEDICO 29.0-29.0.9 - Missing Encryption of Sensitive Data in DNET Protocol

CVSS 8.6

CVE-2025-59410 LOW

Dragonfly < 2.1.0 - Missing Encryption of Sensitive Data via HTTP Download

CVSS 3.7

CVE-2025-10227 MEDIUM

AxxonSoft Axxon One < 2.0.8 - Sensitive Data Exposure via Unencrypted Object Archive

CVSS 4.6

CVE-2025-31977 MEDIUM

HCL BigFix SM - Cryptographic Weakness via Weak Encryption Algorithms

CVSS 5.3

CVE-2025-48862 HIGH

Bosch Rexroth ctrlX OS Setup 1.20.0-1.20.0, 2.6.0-2.6.0, 3.6.0-3.6.1 - Unprotected User Data Exposure

CVSS 7.1

CVE-2025-8763 LOW

Ruijie EG306MG 3.0(1)B11P309 - Missing Encryption

CVSS 3.7