Vulnerabilities > Missing Encryption of Sensitive Data

DATE CVE VULNERABILITY TITLE RISK
2024-08-19 CVE-2024-42657 Missing Encryption of Sensitive Data vulnerability in Nepstech Ntpl-Xpon1Gfevn Firmware 1.0
An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process
network
low complexity
nepstech CWE-311
7.5
2024-08-15 CVE-2024-31905 Missing Encryption of Sensitive Data vulnerability in IBM Qradar Network Packet Capture 7.5.0
IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.
network
high complexity
ibm CWE-311
5.9
2024-08-14 CVE-2024-40620 Missing Encryption of Sensitive Data vulnerability in Rockwellautomation Pavilion8 5.20.00
CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information.
network
low complexity
rockwellautomation CWE-311
7.5
2024-07-31 CVE-2024-23444 Missing Encryption of Sensitive Data vulnerability in Elastic Elasticsearch
It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command invocation.
network
low complexity
elastic CWE-311
7.5
2024-06-05 CVE-2023-49927 Missing Encryption of Sensitive Data vulnerability in Samsung products
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300.
network
low complexity
samsung CWE-311
5.3
2024-02-05 CVE-2024-24768 Missing Encryption of Sensitive Data vulnerability in Fit2Cloud 1Panel 1.9.5
1Panel is an open source Linux server operation and maintenance management panel.
network
low complexity
fit2cloud CWE-311
7.5
2024-01-11 CVE-2023-50126 Missing Encryption of Sensitive Data vulnerability in Hozard Alarm System 1.0
Missing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow attackers to create a cloned tag via brief physical proximity to one of the original tags, which results in an attacker being able to bring the alarm system to a disarmed state.
low complexity
hozard CWE-311
6.5
2024-01-11 CVE-2023-50129 Missing Encryption of Sensitive Data vulnerability in Flient Smart Lock Advanced Firmware 1.0
Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter.
low complexity
flient CWE-311
6.5
2024-01-02 CVE-2023-6339 Missing Encryption of Sensitive Data vulnerability in Google Nest Wifi PRO Firmware
Google Nest WiFi Pro root code-execution & user-data compromise
network
low complexity
google CWE-311
critical
9.8
2024-01-02 CVE-2023-33037 Missing Encryption of Sensitive Data vulnerability in Qualcomm products
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
local
low complexity
qualcomm CWE-311
5.5