Vulnerabilities > Missing Encryption of Sensitive Data

DATE CVE VULNERABILITY TITLE RISK
2024-01-11 CVE-2023-50126 Missing Encryption of Sensitive Data vulnerability in Hozard Alarm System 1.0
Missing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow attackers to create a cloned tag via brief physical proximity to one of the original tags, which results in an attacker being able to bring the alarm system to a disarmed state.
low complexity
hozard CWE-311
6.5
2024-01-11 CVE-2023-50129 Missing Encryption of Sensitive Data vulnerability in Flient Smart Lock Advanced Firmware 1.0
Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter.
low complexity
flient CWE-311
6.5
2024-01-02 CVE-2023-6339 Missing Encryption of Sensitive Data vulnerability in Google Nest Wifi PRO Firmware
Google Nest WiFi Pro root code-execution & user-data compromise
network
low complexity
google CWE-311
critical
9.8
2024-01-02 CVE-2023-33037 Missing Encryption of Sensitive Data vulnerability in Qualcomm products
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
local
low complexity
qualcomm CWE-311
5.5
2023-12-12 CVE-2023-46219 Missing Encryption of Sensitive Data vulnerability in multiple products
When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.
network
low complexity
haxx fedoraproject CWE-311
5.3
2023-11-08 CVE-2023-44098 Missing Encryption of Sensitive Data vulnerability in Huawei Emui and Harmonyos
Vulnerability of missing encryption in the card management module.
network
low complexity
huawei CWE-311
7.5
2023-10-26 CVE-2023-41095 Missing Encryption of Sensitive Data vulnerability in Silabs Openthread SDK 2.3.0.0/2.3.1.0
Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs OpenThread SDK: 2.3.1 and earlier.
network
low complexity
silabs CWE-311
critical
9.1
2023-10-26 CVE-2023-41096 Missing Encryption of Sensitive Data vulnerability in Silabs Emberznet SDK 7.3.0.0/7.3.1.0
Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.
low complexity
silabs CWE-311
6.1
2023-10-17 CVE-2022-22386 Missing Encryption of Sensitive Data vulnerability in IBM Security Verify Privilege On-Premises
IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.
network
high complexity
ibm CWE-311
5.9
2023-10-17 CVE-2022-22377 Missing Encryption of Sensitive Data vulnerability in IBM Security Verify Privilege On-Premises
IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.
network
high complexity
ibm CWE-311
5.3