Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text.EPSS 0.1%Oct 14, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default.Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications.EPSS 0.1%Oct 12, 2026
- CriticalAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostOct 8, 2026
- Medium5.9IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using…EPSS 0.2%Sep 18, 2026
- Low2.3STER uses unencrypted TCP traffic to transmit data over the network.May 22, 2026
- Medium5.3Foscam VD1 Video Doorbell before V5.3.13_1072 is vulnerable to Cleartext Transmission of Sensitive Information.May 14, 2026
- Medium4.3HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.May 14, 2026
- Medium5.4HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations.May 14, 2026
- Medium6.3Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.May 14, 2026
- High7.5Using libcurl, when a custom header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom head…May 13, 2026
- Medium5.9A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool.May 13, 2026
- High7.5Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids.May 10, 2026
- Medium5.3Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses.May 10, 2026
- Medium5.3Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk.May 9, 2026
- Critical9.1HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could all…May 6, 2026
- Low2.9A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01.May 2, 2026
- High8.8This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.Apr 29, 2026
- Medium6.9A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication.Apr 24, 2026
- High7.5Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Medium5.3HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.Apr 21, 2026
- Medium5.9OpenClaw before 2026.4.2 accepts non-loopback cleartext ws:// gateway endpoints and transmits stored gateway credentials over unencrypted connections.Apr 21, 2026
- High7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-serv…Apr 20, 2026
- Medium6.5Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.Apr 17, 2026
- Medium4.8Cryptomator is an open-source client-side encryption application for cloud storage.Apr 16, 2026
60 records · page 1 of 3
PreviousNext