Vulnerabilities > Cleartext Transmission of Sensitive Information

DATE CVE VULNERABILITY TITLE RISK
2023-06-28 CVE-2023-21220 Cleartext Transmission of Sensitive Information vulnerability in Google Android
there is a possible use of unencrypted transport over cellular networks due to an insecure default value.
network
low complexity
google CWE-319
7.5
2023-06-19 CVE-2023-31410 Cleartext Transmission of Sensitive Information vulnerability in Sick Eventcam APP
A remote unprivileged attacker can intercept the communication via e.g.
network
high complexity
sick CWE-319
7.4
2023-06-15 CVE-2023-23841 Cleartext Transmission of Sensitive Information vulnerability in Solarwinds Serv-U
SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.? Part of the URL of the request discloses sensitive data. 
network
low complexity
solarwinds CWE-319
7.5
2023-06-13 CVE-2023-31195 Cleartext Transmission of Sensitive Information vulnerability in Asus Rt-Ax3000 Firmware
ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute.
network
high complexity
asus CWE-319
5.3
2023-06-13 CVE-2022-41327 Cleartext Transmission of Sensitive Information vulnerability in Fortinet Fortios and Fortiproxy
A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands.
local
low complexity
fortinet CWE-319
4.4
2023-06-05 CVE-2023-27861 Cleartext Transmission of Sensitive Information vulnerability in IBM Maximo Application Suite 8.8.0/8.9.0
IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information in cleartext that could be intercepted by an attacker using man in the middle techniques.
network
high complexity
ibm CWE-319
5.9
2023-06-01 CVE-2023-33960 Cleartext Transmission of Sensitive Information vulnerability in Openproject
OpenProject is web-based project management software.
network
low complexity
openproject CWE-319
7.5
2023-05-31 CVE-2023-33730 Cleartext Transmission of Sensitive Information vulnerability in Escanav Escan Management Console 14.0.1400.2281
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.
network
low complexity
escanav CWE-319
critical
9.8
2023-05-31 CVE-2023-28348 Cleartext Transmission of Sensitive Information vulnerability in Faronics Insight 10.0.19045
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
network
high complexity
faronics CWE-319
7.4
2023-05-26 CVE-2023-33187 Cleartext Transmission of Sensitive Information vulnerability in Highlight
Highlight is an open source, full-stack monitoring platform.
network
low complexity
highlight CWE-319
6.5