56 matches found
CVE-2019-18200
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, they are prone to keystroke injection attacks...
CVE-2025-27720
The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials...
CVE-2025-32881
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages...
PT-2025-15880 · Meddream · Web Dicom Viewer +1
Name of the Vulnerable Software and Affected Versions: MedDream WEB DICOM Viewer affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. The flaw exists within the Web Portal due to the lack of encrypti...
CVE-2025-2909 Lack of encryption vulnerability in DuoxMe
The lack of encryption in the DuoxMe formerly Blue application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information...
CVE-2025-0760
A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption...
CVE-2025-0760
A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption...
CVE-2025-0760 Stored Credential Disclosure Vulnerability
A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption...
CVE-2025-0760 Stored Credential Disclosure Vulnerability
A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption...
CVE-2025-0760
CVE-2025-0760 describes a credential disclosure in Tenable Identity Exposure prior to version 3.77.9. The root cause is lack of encryption for stored SMTP credentials, allowing an administrator to extract them. The CVSS v3.1 base metrics indicate a Low impact (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)...
CVE-2024-36558
Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication...
CVE-2024-36558
Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication...
CVE-2024-36558
Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication...
Red Hat Ansible Automation Platform 安全漏洞
Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for enabling strategic automation from Red Hat USA. A security vulnerability exists in Red Hat Ansible Automation Platform that stems from a lack of encryption of sensitive information, which could allow an attacker with networ...
Unspecified Vulnerability in Rockwell Automation Pavilion8
Rockwell Automation Pavilion8 is a model prediction console from Rockwell Automation. A security vulnerability in Rockwell Automation Pavilion8 version 5.20, which stems from a lack of encryption of sensitive information, can be exploited by an attacker to cause data sent between the console and...
CVE-2024-40620
CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data being sent between the Console and the Dashboard without encryption, which can be seen in the logs of proxy servers, potentially impacting the...
CVE-2024-41688
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the...
CVE-2024-26288 PHOENIX CONTACT: Lack of SSL support in CHARX Series
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...
PT-2024-29508 · Syrotech · Sy-Gpon-1110-Wdont Router
Name of the Vulnerable Software and Affected Versions: SyroTech SY-GPON-1110-WDONT Router affected versions not specified Description: This issue is related to the lack of encryption in storing usernames and passwords within the router's firmware/database. An attacker with physical access could...