CWE-311

High likelihood

Missing Encryption of Sensitive Data

Parent: CWE-693 - Protection Mechanism Failure

The product does not encrypt sensitive or critical information before storage or transmission.

508 vulnerabilities with CWE-311
CVE-2023-38688 HIGH
twitch-tui <2.4.1 - Info Disclosure
CVSS 7.5
CVE-2023-30561 MEDIUM
BD Alaris 8015 PCU Firmware < 12.1.3 - Missing Encryption of Sensitive Data
CVSS 6.1
CVE-2023-31825 HIGH
Inageya 13.4.1 - Sensitive Information Exposure via Miniapp Channel Access Token
CVSS 7.5
CVE-2023-31822 HIGH
Entetsu Store <13.4.1 - Info Disclosure
CVSS 7.5
CVE-2023-31820 HIGH
Shizutetsu Store <13.6.1 - Info Disclosure
CVSS 7.5
CVE-2023-31819 HIGH
KEISEI STORE Co, Ltd. LIVRE KEISEI <v.13.6.1 - Info Disclosure
CVSS 7.5
CVE-2023-37943 MEDIUM
Jenkins Active Directory Plugin < 2.30 - Unauthenticated Sensitive Data Exposure via Unencrypted Connection Test
CVSS 5.9
CVE-2023-37192 HIGH
Bitcoin Core v22 - Memory Corruption and Unauthorized Transaction Redirection
CVSS 7.5
CVE-2023-33849 LOW
IBM TXSeries for Multiplatforms - Info Disclosure
CVSS 3.7
CVE-2023-34258 HIGH
BMC Patrol < 22.1.00 - Remote Sensitive Data Exposure via Default AES Key
CVSS 7.5
CVE-2023-28045 MEDIUM
Dell CloudIQ Collector 1.10.2-1.10.16 - Missing Encryption of Sensitive Data
CVSS 6.3
CVE-2023-32982 MEDIUM
Jenkins Ansible Plugin < 204.v8191fd551eb_f - Cleartext Storage of Sensitive Information in Job config.xml
CVSS 4.3
CVE-2023-21404 MEDIUM
AXIS OS 11.0.89-11.3.x - Use of Hard-coded Cryptographic Key in Legacy LUA Components
CVSS 5.3
CVE-2023-32290 HIGH
myMail < 14.30 - Cleartext Transmission of Sensitive Information via STARTTLS Bypass
CVSS 7.5
CVE-2023-22948 MEDIUM
TigerGraph Enterprise Free Edition 3.x < 3.7.0 - Unprotected SSH Private Key Exposure
CVSS 4.9
CVE-2023-30523 MEDIUM
Jenkins Report Portal Plugin <= 0.5 - Cleartext Storage of Sensitive Information in Job Configuration
CVSS 4.3
CVE-2023-0750 CRITICAL
lynx-technik yellobrik_pec_1864_firmware - Authentication Bypass via Client-Side Enforcement
CVSS 9.8
CVE-2023-28841 MEDIUM
Moby 1.12.0-20.10.24 - Unencrypted Data Transmission in Overlay Network Driver
CVSS 6.8
CVE-2023-28999 MEDIUM
Nextcloud <3.8.0-<4.8.0 - Privilege Escalation
CVSS 6.9
CVE-2023-0690 MEDIUM
HashiCorp Boundary 0.10.0-0.11.2 - Cleartext Storage of Sensitive Information in PKI Worker Credentials
CVSS 5.0
CVE-2023-23127 MEDIUM
Connectwise Control 22.8.10013.8329 - Missing Encryption of Sensitive Data
CVSS 5.3
CVE-2022-22386 MEDIUM
IBM Security Verify Privilege On-Premises 11.5 - Info Disclosure
CVSS 5.3
CVE-2022-22377 MEDIUM
IBM Security Verify Privilege On-Premises 11.5 - Info Disclosure
CVSS 5.3
CVE-2022-33161 MEDIUM
IBM Security Directory Server 6.4.0 - Info Disclosure
CVSS 5.3
CVE-2022-22401 MEDIUM
IBM Aspera Faspex 5.0.5 - Info Disclosure
CVSS 5.9
Details
Vulnerabilities 508
Exploit Likelihood High