CVE-2025-52435 Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller

J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to observe the remainder of the exchange...

The vulnerability of the BitLocker() function in the microprogramming software of the industrial digital gas analyzer MEAC300-FNADE4 allows a perpetrator to gain unauthorized access to read and write protected information.

The vulnerability of the BitLocker function in the microprogramming software for the industrial digital gas analyzer MEAC300-FNADE4 is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an intruder to gain unauthorized access to and read/write th...

CVE-2025-53656

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

CVE-2019-9681

Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include:...