CWE-311
High likelihoodMissing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
508 vulnerabilities with CWE-311
CVE-2023-38688
HIGH
twitch-tui <2.4.1 - Info Disclosure
CVSS 7.5
CVE-2023-30561
MEDIUM
BD Alaris 8015 PCU Firmware < 12.1.3 - Missing Encryption of Sensitive Data
CVSS 6.1
CVE-2023-31825
HIGH
Inageya 13.4.1 - Sensitive Information Exposure via Miniapp Channel Access Token
CVSS 7.5
CVE-2023-31822
HIGH
Entetsu Store <13.4.1 - Info Disclosure
CVSS 7.5
CVE-2023-31820
HIGH
Shizutetsu Store <13.6.1 - Info Disclosure
CVSS 7.5
CVE-2023-31819
HIGH
KEISEI STORE Co, Ltd. LIVRE KEISEI <v.13.6.1 - Info Disclosure
CVSS 7.5
CVE-2023-37943
MEDIUM
Jenkins Active Directory Plugin < 2.30 - Unauthenticated Sensitive Data Exposure via Unencrypted Connection Test
CVSS 5.9
CVE-2023-37192
HIGH
Bitcoin Core v22 - Memory Corruption and Unauthorized Transaction Redirection
CVSS 7.5
CVE-2023-33849
LOW
IBM TXSeries for Multiplatforms - Info Disclosure
CVSS 3.7
CVE-2023-34258
HIGH
BMC Patrol < 22.1.00 - Remote Sensitive Data Exposure via Default AES Key
CVSS 7.5
CVE-2023-28045
MEDIUM
Dell CloudIQ Collector 1.10.2-1.10.16 - Missing Encryption of Sensitive Data
CVSS 6.3
CVE-2023-32982
MEDIUM
Jenkins Ansible Plugin < 204.v8191fd551eb_f - Cleartext Storage of Sensitive Information in Job config.xml
CVSS 4.3
CVE-2023-21404
MEDIUM
AXIS OS 11.0.89-11.3.x - Use of Hard-coded Cryptographic Key in Legacy LUA Components
CVSS 5.3
CVE-2023-32290
HIGH
myMail < 14.30 - Cleartext Transmission of Sensitive Information via STARTTLS Bypass
CVSS 7.5
CVE-2023-22948
MEDIUM
TigerGraph Enterprise Free Edition 3.x < 3.7.0 - Unprotected SSH Private Key Exposure
CVSS 4.9
CVE-2023-30523
MEDIUM
Jenkins Report Portal Plugin <= 0.5 - Cleartext Storage of Sensitive Information in Job Configuration
CVSS 4.3
CVE-2023-0750
CRITICAL
lynx-technik yellobrik_pec_1864_firmware - Authentication Bypass via Client-Side Enforcement
CVSS 9.8
CVE-2023-28841
MEDIUM
Moby 1.12.0-20.10.24 - Unencrypted Data Transmission in Overlay Network Driver
CVSS 6.8
CVE-2023-28999
MEDIUM
Nextcloud <3.8.0-<4.8.0 - Privilege Escalation
CVSS 6.9
CVE-2023-0690
MEDIUM
HashiCorp Boundary 0.10.0-0.11.2 - Cleartext Storage of Sensitive Information in PKI Worker Credentials
CVSS 5.0
CVE-2023-23127
MEDIUM
Connectwise Control 22.8.10013.8329 - Missing Encryption of Sensitive Data
CVSS 5.3
CVE-2022-22386
MEDIUM
IBM Security Verify Privilege On-Premises 11.5 - Info Disclosure
CVSS 5.3
CVE-2022-22377
MEDIUM
IBM Security Verify Privilege On-Premises 11.5 - Info Disclosure
CVSS 5.3
CVE-2022-33161
MEDIUM
IBM Security Directory Server 6.4.0 - Info Disclosure
CVSS 5.3
CVE-2022-22401
MEDIUM
IBM Aspera Faspex 5.0.5 - Info Disclosure
CVSS 5.9
Details
Vulnerabilities
508
Exploit Likelihood
High