CWE-311

High likelihood

Missing Encryption of Sensitive Data

Parent: CWE-693 - Protection Mechanism Failure

The product does not encrypt sensitive or critical information before storage or transmission.

508 vulnerabilities with CWE-311
CVE-2016-10666 HIGH
tomita-parser < 0.0.3 - Remote Code Execution via HTTP Resource Download
CVSS 8.1
CVE-2016-10659 HIGH
macchina/poco < 1.7.7 - Remote Code Execution via HTTP Source File Download
CVSS 8.1
CVE-2016-10658 HIGH
native-opencv - Remote Code Execution via MITM Binary Download
CVSS 8.1
CVE-2016-10650 HIGH
ntfserver < 0.0.18 - Remote Code Execution via MITM Binary Swap
CVSS 8.1
CVE-2016-10635 HIGH
broccoli-closure < 1.3.1 - Remote Code Execution via HTTP Binary Download
CVSS 8.1
CVE-2016-10627 HIGH
scala-bin < 0.3.3 - Remote Code Execution via MITM Binary Download
CVSS 8.1
CVE-2016-10611 HIGH
strider-sauce < 0.6.3 - Remote Code Execution via MITM HTTP Resource Download
CVSS 8.1
CVE-2016-10601 HIGH
webdrvr < 2.43.0-1 - Remote Code Execution via MITM Binary Download
CVSS 8.1
CVE-2016-10593 HIGH
ibapi < 2.4.2 - Remote Code Execution via MITM Binary Swap
CVSS 8.1
CVE-2016-10591 HIGH
Prince 1.4.4-1.4.5 and npm/prince < 1.4.7 - Remote Code Execution via MITM Tarball Swap
CVSS 8.1
CVE-2016-10590 HIGH
cue-sdk-node < 1.2.0 - Remote Code Execution via HTTP Resource Download
CVSS 8.1
CVE-2016-10589 HIGH
selenium-binaries < 0.10.0 and >= 0 < 0.15.0 - Remote Code Execution via MITM Binary Swapping
CVSS 8.1
CVE-2016-10586 HIGH
macaca-chromedriver < 1.0.29 - Remote Code Execution via HTTP Binary Download
CVSS 8.1
CVE-2016-10584 HIGH
dalekjs/dalekjs < 0.0.11 - Remote Code Execution via MITM Binary Swap
CVSS 8.1
CVE-2016-10578 HIGH
unicode < 9.0.0 - Man-in-the-Middle Attack via HTTP Resource Download
CVSS 8.1
CVE-2016-10577 HIGH
ibm_db < 1.0.2 - Remote Code Execution via MITM Binary Download
CVSS 8.1
CVE-2016-10573 HIGH
baryton-saxophone < 3.0.1 - Remote Code Execution via HTTP Binary Download
CVSS 8.1
CVE-2016-10570 HIGH
pngcrush-installer < 1.8.10 - Remote Code Execution via HTTP Binary Download
CVSS 8.1
CVE-2016-10568 HIGH
geoip-lite-country < 1.1.4 - Man-in-the-Middle Data Resource Download
CVSS 8.1
CVE-2016-10567 HIGH
product-monitor < 2.2.5 - Remote Code Execution via MITM JavaScript Resource Download
CVSS 8.1
CVE-2016-10566 HIGH
install-nw < 1.1.5 - Remote Code Execution via MITM Binary Swap
CVSS 8.1
CVE-2016-10559 HIGH
selenium-download < 2.0.7 - Remote Code Execution via HTTP Binary Download
CVSS 8.1
CVE-2016-10558 HIGH
aerospike < 2.4.2 - Remote Code Execution via MITM Binary Download
CVSS 8.1
CVE-2015-3207 MEDIUM
Openshift Origin 3 - Info Disclosure
CVSS 5.3
CVE-2015-0558 MEDIUM
ADB P.DGA4001N Firmware PDG_TEF_SP_4.06L.6 - Missing Encryption of Sensitive Data via WPA Key Generation
CVSS 5.3
Details
Vulnerabilities 508
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits