Vulnerabilities > Cleartext Transmission of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2022-07-26 CVE-2022-31204 Cleartext Transmission of Sensitive Information vulnerability in Omron products
Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords.
network
low complexity
omron CWE-319
7.5
2022-07-21 CVE-2022-28861 Cleartext Transmission of Sensitive Information vulnerability in Citilog 8.0
The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP credentials in a cleartext HTTP traffic.
network
high complexity
citilog CWE-319
5.9
2022-06-30 CVE-2022-34801 Cleartext Transmission of Sensitive Information vulnerability in Jenkins Build Notifications 1.4.2/1.4.3/1.5.0
Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
network
low complexity
jenkins CWE-319
4.3
2022-06-30 CVE-2022-34804 Cleartext Transmission of Sensitive Information vulnerability in Jenkins Opsgenie
Jenkins OpsGenie Plugin 1.9 and earlier transmits API keys in plain text as part of the global Jenkins configuration form and job configuration forms, potentially resulting in their exposure.
network
low complexity
jenkins CWE-319
4.3
2022-06-29 CVE-2017-20109 Cleartext Transmission of Sensitive Information vulnerability in Calabrio Teleopti Workforce Management 7.1.0
A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0.
network
low complexity
calabrio CWE-319
6.5
2022-06-28 CVE-2022-29519 Cleartext Transmission of Sensitive Information vulnerability in Yokogawa Stardom FCJ Firmware and Stardom FCN Firmware
Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware.
high complexity
yokogawa CWE-319
7.5
2022-06-24 CVE-2022-1524 Cleartext Transmission of Sensitive Information vulnerability in Illumina Local RUN Manager 1.3/2.0/3.1
LRM version 2.4 and lower does not implement TLS encryption.
network
high complexity
illumina CWE-319
5.9
2022-06-24 CVE-2022-21829 Cleartext Transmission of Sensitive Information vulnerability in Concretecms Concrete CMS
Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE.
network
low complexity
concretecms CWE-319
critical
9.8
2022-06-14 CVE-2022-31046 Cleartext Transmission of Sensitive Information vulnerability in Typo3
TYPO3 is an open source web content management system.
network
low complexity
typo3 CWE-319
4.3
2022-06-09 CVE-2022-25805 Cleartext Transmission of Sensitive Information vulnerability in Igel Universal Management Suite 6.07.100
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.
network
low complexity
igel CWE-319
6.5