Vulnerabilities > Cleartext Transmission of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2022-03-25 CVE-2022-0988 Cleartext Transmission of Sensitive Information vulnerability in Deltaww Diaenergie 1.7.5
Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP.
network
low complexity
deltaww CWE-319
7.5
2022-03-23 CVE-2021-27422 Cleartext Transmission of Sensitive Information vulnerability in GE products
GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol.
network
low complexity
ge CWE-319
7.5
2022-03-18 CVE-2020-25178 Cleartext Transmission of Sensitive Information vulnerability in multiple products
ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP.
8.8
2022-03-11 CVE-2021-41849 Cleartext Transmission of Sensitive Information vulnerability in multiple products
An issue was discovered in Luna Simo PPR1.180610.011/202001031830.
local
low complexity
bluproducts wikomobile luna CWE-319
5.5
2022-03-04 CVE-2021-40846 Cleartext Transmission of Sensitive Information vulnerability in Tradingpaints Trading Paints 2.0.36
An issue was discovered in Rhinode Trading Paints through 2.0.36.
network
high complexity
tradingpaints CWE-319
7.5
2022-02-25 CVE-2022-21798 Cleartext Transmission of Sensitive Information vulnerability in GE Cimplicity
The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.
network
low complexity
ge CWE-319
critical
9.8
2022-02-20 CVE-2021-45081 Cleartext Transmission of Sensitive Information vulnerability in Cobbler Project Cobbler
An issue was discovered in Cobbler through 3.3.1.
network
high complexity
cobbler-project CWE-319
5.9
2022-02-18 CVE-2021-39026 Cleartext Transmission of Sensitive Information vulnerability in IBM Guardium Data Encryption 5.0.0.2/5.0.0.3
IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.
network
high complexity
ibm CWE-319
5.9
2022-02-15 CVE-2022-25180 Cleartext Transmission of Sensitive Information vulnerability in Jenkins Pipeline: Groovy
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.
network
low complexity
jenkins CWE-319
4.3
2022-02-09 CVE-2022-0162 Cleartext Transmission of Sensitive Information vulnerability in Tp-Link Tl-Wr841N Firmware 3.16.9
The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format.
network
low complexity
tp-link CWE-319
critical
9.8