73 matches found
CVE-2026-30081
CVE-2026-30081 CVE-2026-30081 has been officially published by MITRE. Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2026-30081 CWE| CWE-319: Cleartext Transmission of Sensitive Information Device Model| QN-I-470 Firmware| 6.1.1.B1 Severity| HIGH Vendor| Quantum Networks Vulnerability...
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default
Problem Scrapy’s S3DownloadHandler sends signed S3 requests over plaintext HTTP by default. A normal request like s3://bucket/key is converted into http://bucket.s3.amazonaws.com/key unless request.meta"issecure" is explicitly set. The generated request is then signed with configured AWS...
CVE-2026-48588 vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, authentik-fips...
curl: curl: Information disclosure due to incorrect TLS connection reuse
A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection via IMAP, SMTP, or POP3 and then making a subsequent request to the same host that requires Transport Layer Security TLS. Due to incorrect connection reuse, the subsequent request would bypass t...
CVE-2025-70048: Cleartext Transmission of Sensitive Information
An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2...
CVE-2026-20801: Cleartext Transmission of Sensitive Information
Cleartext Transmission of Sensitive Information CWE-319 in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration...
CVE-2021-22703
A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...
EUVD-2019-16400
Malware in sbrugna...
EUVD-2019-16399
Malware in sbrugna...
EUVD-2020-28613
Malware in sbrugna...
EUVD-2022-49476
Malicious code in bioql PyPI...
EUVD-2021-9837
Malicious code in bioql PyPI...
EUVD-2021-9838
Malicious code in bioql PyPI...
CVE-2020-7488
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers...
CVE-2019-6845
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...
CVE-2019-6846
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause information disclosure when using the FTP protocol...
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2023-31346 DESCRIPTION: AMD SEV-SNP Firmware could allow a local authenticated...
Security Advisory 0113
Security Advisory 0113 . CSAF PDF Date: April 8, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 8, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-12378 CVSSv3.1 Base Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Common Weakness Enumeration: CWE-319: Cleartext...
