Vulnerabilities > Cleartext Transmission of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2019-12-18 CVE-2019-19889 Cleartext Transmission of Sensitive Information vulnerability in Humaxdigital Hgb10R-02 Firmware 201608171855
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices.
network
low complexity
humaxdigital CWE-319
7.5
2019-12-18 CVE-2019-8632 Cleartext Transmission of Sensitive Information vulnerability in Apple Texture
Some analytics data was sent using HTTP rather than HTTPS.
network
low complexity
apple CWE-319
6.5
2019-12-17 CVE-2019-3993 Cleartext Transmission of Sensitive Information vulnerability in multiple products
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.
network
low complexity
elog-project fedoraproject CWE-319
7.5
2019-12-17 CVE-2019-3992 Cleartext Transmission of Sensitive Information vulnerability in multiple products
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.
network
low complexity
elog-project fedoraproject CWE-319
7.5
2019-12-17 CVE-2019-16568 Cleartext Transmission of Sensitive Information vulnerability in Jenkins Sctmexecutor
Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations.
network
low complexity
jenkins CWE-319
5.3
2019-12-13 CVE-2019-16732 Cleartext Transmission of Sensitive Information vulnerability in multiple products
Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user.
network
high complexity
skymee petwant CWE-319
8.1
2019-12-12 CVE-2019-18285 Cleartext Transmission of Sensitive Information vulnerability in Siemens Sppa-T3000 Application Server R8.2
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2).
network
high complexity
siemens CWE-319
5.9
2019-12-10 CVE-2019-19251 Cleartext Transmission of Sensitive Information vulnerability in Last.Fm Desktop
The Last.fm desktop app (Last.fm Scrobbler) through 2.1.39 on macOS makes HTTP requests that include an API key without the use of SSL/TLS.
network
low complexity
last-fm CWE-319
5.3
2019-12-03 CVE-2015-7542 Cleartext Transmission of Sensitive Information vulnerability in multiple products
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
network
low complexity
aquamaniac debian opensuse CWE-319
5.3
2019-12-02 CVE-2019-19316 Cleartext Transmission of Sensitive Information vulnerability in Hashicorp Terraform
When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.
network
low complexity
hashicorp CWE-319
7.5