Vulnerabilities > Cleartext Transmission of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2017-10-23 CVE-2017-7133 Cleartext Transmission of Sensitive Information vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-319
7.5
2017-10-23 CVE-2017-7078 Cleartext Transmission of Sensitive Information vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-319
5.3
2017-10-17 CVE-2017-14009 Cleartext Transmission of Sensitive Information vulnerability in Prominent Multiflex M10A Controller Firmware
An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface.
network
low complexity
prominent CWE-319
6.5
2017-10-12 CVE-2017-15290 Cleartext Transmission of Sensitive Information vulnerability in Mirasys Video Management System
Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality.
network
low complexity
mirasys CWE-319
7.5
2017-10-05 CVE-2017-15042 Cleartext Transmission of Sensitive Information vulnerability in Golang GO
An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1.
network
high complexity
golang CWE-319
5.9
2017-08-07 CVE-2017-6665 Cleartext Transmission of Sensitive Information vulnerability in Cisco IOS and IOS XE
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets that are transferred in clear text within an affected system, an Information Disclosure Vulnerability.
low complexity
cisco CWE-319
6.5
2017-07-17 CVE-2017-1181 Cleartext Transmission of Sensitive Information vulnerability in IBM Tivoli Monitoring 6.2.2.9/6.2.3.5/6.3.0.7
IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted.
local
high complexity
ibm CWE-319
7.0
2017-07-17 CVE-2017-1000024 Cleartext Transmission of Sensitive Information vulnerability in Gnome Shotwell
Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission
network
low complexity
gnome CWE-319
7.5
2017-07-10 CVE-2017-5652 Cleartext Transmission of Sensitive Information vulnerability in Apache Impala 2.7.0/2.8.0
During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when the cluster was configured to use TLS.
network
low complexity
apache CWE-319
7.5
2017-05-26 CVE-2017-9035 Cleartext Transmission of Sensitive Information vulnerability in Trendmicro Serverprotect 3.0
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
network
high complexity
trendmicro CWE-319
7.4