Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.6Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged…CVE-2026-20801 · gallagher · hanwha vms integration · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Mar 3, 2026
Medium6.5In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling.CVE-2024-43766 · google · android · CVE.org · FIRST EPSS · NIST NVD · Android, GoogleEPSS 0.1%Mar 2, 2026
High7.5In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartex…CVE-2025-58107 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 2, 2026
High8.2SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials.CVE-2026-27752 · sodola-network · sl902-swtgw124as firmware · CVE.org · NIST NVDFeb 27, 2026
High7.5The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication.CVE-2026-24455 · CVE.org · NIST NVDFeb 20, 2026
Medium6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs ar…CVE-2023-23915 · haxx · curl · CVE.org · FIRST EPSS · NIST NVD · SplunkEPSS 0.9%Feb 23, 2023
Critical9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.CVE-2023-23914 · haxx · curl · CVE.org · FIRST EPSS · NIST NVD · SplunkEPSS 0.9%Feb 23, 2023
High7.5A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.CVE-2022-43551 · haxx · curl · CVE.org · FIRST EPSS · NIST NVD · SplunkEPSS 16.6%Dec 23, 2022
High7.5In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP.CVE-2022-42916 · haxx · curl · CVE.org · FIRST EPSS · NIST NVD · SplunkEPSS 2.0%Oct 29, 2022
Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.CVE-2022-30115 · haxx · curl · CVE.org · FIRST EPSS · NIST NVD · SplunkEPSS 1.4%Jun 2, 2022
High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…CVE-2021-22946 · haxx · curl · CVE.org · FIRST EPSS · NIST NVDEPSS 4.5%Sep 29, 2021
Medium5.3When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are…CVE-2021-22923 · haxx · curl · CVE.org · FIRST EPSS · NIST NVDEPSS 2.0%Aug 5, 2021