Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.Apr 17, 2026
- Medium4.8Cryptomator is an open-source client-side encryption application for cloud storage.Apr 16, 2026
- High7.5A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4…Apr 14, 2026
- Medium6.5A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4…Apr 14, 2026
- Medium5.3Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Apr 14, 2026
- High7.5Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Apr 14, 2026
- Medium4.3IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies.Apr 1, 2026
- Low3.6The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking.Mar 31, 2026
- High8.2A flaw was found in libsoup.Mar 30, 2026
- Medium6.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation.Mar 25, 2026
- Medium5.9IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.Mar 25, 2026
- Medium6.1A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information.Mar 25, 2026
- Low1.3A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Mar 23, 2026
- Critical9.1Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by an attacker.Mar 21, 2026
- High8.7Cryptomator encrypts data being stored on cloud infrastructure.Mar 20, 2026
- High8.7Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption.Mar 17, 2026
- Medium5.7In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsMar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information in cleartext…Mar 13, 2026
- High7.5Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Mar 10, 2026
- High7.5Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Mar 10, 2026
- High7.5An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2.Mar 9, 2026
- Low2.3A vulnerability was detected in Mendi Neurofeedback Headset V4.Mar 7, 2026
- High8.7Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync…Mar 5, 2026
- Critical9.6A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allow…Mar 4, 2026
- Medium5.9IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Co…Mar 3, 2026