Overview 994 matches · 55 in Waratek scope · 0 protected · 6 exploited · 0 CISA KEV · 14 public PoC · 2 EPSS ≥ 0.5
994matches
55in Waratek scope5.5%
0protected0.0%
6exploited0.6%
0CISA KEV0.0%
14public PoC1.4%
2EPSS ≥ 0.50.2%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
55
5.5%
Outside Waratek scope
13
1.3%
Not applicable
926
93.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
994
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 186 / year
20021
Not applicable1
High1
not blocked1
No public exploit1
20030
20041
Not applicable1
Medium1
not blocked1
No public exploit1
20052
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20060
20072
Not applicable2
Medium2
not blocked2
No public exploit2
20084
Not applicable4
High4
not blocked4
No public exploit4
20090
20100
20110
20121
Not applicable1
Medium1
not blocked1
No public exploit1
20130
20141
No exploit published1
Medium1
not blocked1
No public exploit1
20151
Not applicable1
Critical1
not blocked1
No public exploit1
20160
201728
Not applicable28
Critical1
High10
Medium17
not blocked28
Exploited1
No public exploit27
201848
No exploit published3
Not applicable45
Critical11
High19
Medium18
not blocked48
Working exploit published2
No public exploit46
2019106
No exploit published15
Outside Waratek scope4
Not applicable87
Critical12
High40
Medium53
Low1
not blocked106
Working exploit published1
Proof of concept only3
No public exploit102
2020113
No exploit published15
Outside Waratek scope4
Not applicable94
Critical13
High56
Medium42
Low2
not blocked113
Working exploit published3
No public exploit110
202192
No exploit published1
Outside Waratek scope1
Not applicable90
Critical7
High41
Medium41
Low3
not blocked92
Exploited1
Proof of concept only1
No public exploit90
202294
No exploit published5
Outside Waratek scope2
Not applicable87
Critical10
High38
Medium42
Low4
not blocked94
Exploited1
Proof of concept only7
No public exploit86
2023105
No exploit published6
Outside Waratek scope1
Not applicable98
Critical11
High55
Medium38
Low1
not blocked105
Exploited1
Working exploit published1
Proof of concept only17
No public exploit86
202495
No exploit published2
Not applicable93
Critical7
High37
Medium46
Low5
not blocked95
Exploited2
Proof of concept only10
No public exploit83
2025114
Outside Waratek scope1
Not applicable113
Critical16
High49
Medium37
Low12
not blocked114
Proof of concept only19
No public exploit95
2026186
No exploit published7
Not applicable179
Critical16
High76
Medium76
Low18
not blocked186
Proof of concept only25
No public exploit161
2002200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2025-64389 | High | 2025-10-31 | Not applicable | No public exploit | The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol. |
| CVE-2025-12508 | High | 2025-10-31 | Not applicable | No public exploit | When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality. |
| CVE-2025-34271 | High | 2025-10-30 | Not applicable | No public exploit | Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted channel even when SSL/TLS is enabled in the product configuration. As a result, an attacker positioned on the network path can intercept credentials in transit. Captured credentials could allow the attacker to authenticate as a cluster node or service account, enabling further unauthorized access, lateral movement, or system compromise. |
| CVE-2025-61481 | Critical | 2025-10-27 | Not applicable | No public exploit | An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials. |
| CVE-2025-56447 | Critical | 2025-10-22 | Not applicable | Proof of concept only | TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure. |
| CVE-2025-10641 | High | 2025-10-21 | Not applicable | No public exploit | All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit their data to the server using the unencrypted FTP. Clients connect to the FTP server on port 12304 and transmit the data unencrypted. In addition, all traffic between the console client and the server at port 12306 is unencrypted. |
| CVE-2025-62643 | High | 2025-10-17 | Not applicable | Proof of concept only | The Restaurant Brands International (RBI) assistant platform through 2025-09-06 transmits passwords of user accounts in cleartext e-mail messages. |
| CVE-2025-11492 | Critical | 2025-10-16 | Not applicable | No public exploit | In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some communications over the HTTP channel is updated in the Automate 2025.9 patch to enforce HTTPS for all agent communications. |
| CVE-2025-53139 | High | 2025-10-14 | Not applicable | No public exploit | Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2025-41718 | High | 2025-10-14 | Not applicable | No public exploit | A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI. |
| CVE-2025-11640 | Low | 2025-10-12 | Not applicable | No public exploit | A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. This affects an unknown function of the component Bluetooth Low Energy. The manipulation results in cleartext transmission of sensitive information. Access to the local network is required for this attack. Attacks of this nature are highly complex. The exploitability is reported as difficult. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2025-59448 | Medium | 2025-10-06 | Not applicable | No public exploit | Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLink Hub 0382, YoLink Mobile Application 1.40.41, and YoLink MQTT Broker. NOTE: The vendor states that the vulnerability described (related to insecure transmission) only impacts the legacy mobile application logic, not the Hub hardware or firmware. The Hub functions solely as a pass-through (transparent gateway) for LoRa wireless data and does not inspect or process the application layer data. |
| CVE-2025-59406 | Medium | 2025-10-02 | Not applicable | No public exploit | The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected, attackers can recover this OAuth secret without special privileges. This secret is intended to remain confidential and should never be embedded directly in client-side software. |
| CVE-2025-36274 | High | 2025-09-26 | Not applicable | No public exploit | IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user. |
| CVE-2025-10540 | Medium | 2025-09-25 | Not applicable | No public exploit | iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents. |
| CVE-2017-20200 | Low | 2025-09-23 | Not applicable | No public exploit | A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The vendor replied with: "(...) there isn't any security implication associated with your findings." |
| CVE-2025-10776 | Low | 2025-09-22 | Not applicable | Proof of concept only | A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the component Login. Performing manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2025-54818 | High | 2025-09-18 | Not applicable | No public exploit | Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device. |
| CVE-2025-47698 | High | 2025-09-18 | Not applicable | No public exploit | An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials. These credentials are present during the firmware upgrade procedure. |
| CVE-2025-7743 | Critical | 2025-09-16 | Not applicable | No public exploit | Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation. This issue affects Omaspot: before 12.09.2025. |
| CVE-2025-50110 | High | 2025-09-15 | Not applicable | Proof of concept only | An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal server URLs, account IDs, passwords, and device tokens - as plaintext query parameters over HTTPS |
| CVE-2025-55976 | High | 2025-09-10 | Not applicable | Proof of concept only | Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint. |
| CVE-2025-41708 | High | 2025-09-08 | Not applicable | No public exploit | Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission. |
| CVE-2025-7731 | High | 2025-09-01 | Not applicable | No public exploit | Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information. |
| CVE-2025-31972 | Medium | 2025-08-28 | Not applicable | No public exploit | HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components. |
| CVE-2025-52351 | High | 2025-08-21 | Not applicable | No public exploit | Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email and also includes the same password as a query parameter in the account activation URL (e.g., https://domain.com/activate=xyz). This practice can result in password exposure via browser history, proxy logs, referrer headers, and email caching. The vulnerability impacts user credential confidentiality during initial onboarding. |
| CVE-2025-6180 | High | 2025-08-20 | Not applicable | No public exploit | The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition. |
| CVE-2025-57727 | High | 2025-08-20 | Not applicable | No public exploit | In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference |
| CVE-2025-54156 | Critical | 2025-08-18 | Not applicable | No public exploit | The Sante PACS Server Web Portal sends credential information without encryption. |
| CVE-2025-8863 | High | 2025-08-11 | Not applicable | No public exploit | YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission |
| CVE-2025-8741 | Low | 2025-08-08 | Not applicable | Proof of concept only | A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2025-52586 | High | 2025-08-08 | Not applicable | No public exploit | The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write operations for voltage, current, and power configuration, operational status, alarms, telemetry, system reset, or inverter control commands, potentially disrupting power generation or reconfiguring inverter settings. |
| CVE-2025-54799 | Low | 2025-08-07 | Not applicable | No public exploit | Let's Encrypt client and ACME library written in Go (Lego). In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package (thus the lego library and the lego cli as well) don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME challenge over unencrypted HTTP, the ACME protocol requires HTTPS when a client communicates with the CA to performs ACME functions. However, the library fails to enforce HTTPS both in the original discover URL (configured by the library user) and in the subsequent addresses returned by the CAs in the directory and order objects. If users input HTTP URLs or CAs misconfigure endpoints, protocol operations occur over HTTP instead of HTTPS. This compromises privacy by exposing request/response details like account and request identifiers to network attackers. This was fixed in version 4.25.2. |
| CVE-2025-36020 | High | 2025-08-06 | Not applicable | No public exploit | IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information. |
| CVE-2025-52490 | High | 2025-07-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output. |
| CVE-2025-8205 | Low | 2025-07-26 | Not applicable | Proof of concept only | A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionality of the component IP DNS Leakage Detector. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2025-0252 | Medium | 2025-07-25 | Not applicable | No public exploit | HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit. |
| CVE-2025-0250 | Medium | 2025-07-25 | Not applicable | No public exploit | HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks. |
| CVE-2025-53703 | High | 2025-07-22 | Not applicable | No public exploit | DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data without encryption over a channel that could be intercepted by attackers. |
| CVE-2025-36107 | High | 2025-07-21 | Not applicable | No public exploit | IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data. |
| CVE-2025-2818 | Medium | 2025-07-17 | Not applicable | No public exploit | A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application that could allow a nearby attacker within the Bluetooth interaction range to intercept files when transferred to a device not paired in Smart Connect. |
| CVE-2025-53756 | High | 2025-07-16 | Not applicable | No public exploit | This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted device. |
| CVE-2025-53861 | Low | 2025-07-11 | Not applicable | No public exploit | A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting (XSS) attacks allowing attackers to read transmitted data. |
| CVE-2025-44251 | High | 2025-07-10 | Not applicable | No public exploit | Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process. |
| CVE-2025-27457 | High | 2025-07-03 | Not applicable | No public exploit | All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive data. |
| CVE-2025-36034 | Medium | 2025-06-26 | Not applicable | No public exploit | IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques. |
| CVE-2025-5087 | Medium | 2025-06-24 | Not applicable | No public exploit | Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials. |
| CVE-2025-4378 | Critical | 2025-06-24 | Not applicable | No public exploit | Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass. This issue affects ATA-AOF Mobile Application: before 20.06.2025. |
| CVE-2025-32880 | Critical | 2025-06-20 | Not applicable | Proof of concept only | An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks. |
| CVE-2025-26199 | Critical | 2025-06-18 | Not applicable | Proof of concept only | CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application transmits passwords over unencrypted HTTP during the login process, exposing sensitive credentials to potential interception by network-based attackers. A remote attacker with access to the same network (e.g., public Wi-Fi or compromised router) can capture login credentials via Man-in-the-Middle (MitM) techniques. If the attacker subsequently uses the credentials to log in and exploit administrative functions (e.g., file upload), this may lead to remote code execution depending on the environment. |
| CVE-2025-4227 | Low | 2025-06-13 | Not applicable | No public exploit | An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows certain packets to remain unencrypted instead of being properly secured within the tunnel. An attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute. |
| CVE-2025-49194 | High | 2025-06-12 | Not applicable | No public exploit | The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an attacker were to intercept traffic between a client and this server, the credentials would be exposed. |
| CVE-2025-49183 | High | 2025-06-12 | Not applicable | No public exploit | All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files. |
| CVE-2025-44612 | Medium | 2025-05-30 | Not applicable | No public exploit | Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack. |
| CVE-2025-5270 | High | 2025-05-27 | Not applicable | No public exploit | In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and Thunderbird 139. |
| CVE-2025-3480 | Medium | 2025-05-22 | Not applicable | No public exploit | MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Web Portal. The issue results from the lack of encryption when transmitting credentials. An attacker can leverage this vulnerability to disclose transmitted credentials, leading to further compromise. Was ZDI-CAN-25842. |
| CVE-2025-0136 | Medium | 2025-05-14 | Not applicable | No public exploit | Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec. This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls. NOTE: The AES-128-CCM encryption algorithm is not recommended for use. |
| CVE-2025-40583 | Medium | 2025-05-13 | Not applicable | No public exploit | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information. |
| CVE-2025-27720 | Critical | 2025-05-08 | Not applicable | No public exploit | The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials. |
| CVE-2024-12378 | Critical | 2025-05-08 | Not applicable | No public exploit | On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. |
| CVE-2025-47419 | Critical | 2025-05-06 | Not applicable | No public exploit | Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. |
| CVE-2025-32887 | High | 2025-05-01 | Not applicable | No public exploit | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes the next hop. which can be intercepted and used to break frequency hopping. |
| CVE-2025-32884 | Medium | 2025-05-01 | Not applicable | No public exploit | An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages. |
| CVE-2025-32881 | Medium | 2025-05-01 | Not applicable | No public exploit | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages. |
| CVE-2025-42603 | High | 2025-04-23 | Not applicable | No public exploit | This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API response that contains unencrypted sensitive information belonging to other users. Successful exploitation of this vulnerability could allow remote attacker to impersonate the target user and gain unauthorized access to the user account. |
| CVE-2025-25046 | Low | 2025-04-23 | Not applicable | No public exploit | IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques. |
| CVE-2025-32793 | Medium | 2025-04-21 | Not applicable | No public exploit | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue. |
| CVE-2025-43013 | High | 2025-04-17 | Not applicable | No public exploit | In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible |
| CVE-2025-43704 | Medium | 2025-04-16 | Not applicable | No public exploit | Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server. |
| CVE-2025-27722 | Medium | 2025-04-09 | Not applicable | No public exploit | Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may allow a remote unauthenticated attacker to eavesdrop the communication and obtain the authentication information. |
| CVE-2025-26654 | Medium | 2025-04-08 | Not applicable | No public exploit | SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely, but instead allows a redirect from port 80 to 443 (HTTPS). As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request before the redirect may be impacted if the client is configured to use HTTP and sends confidential data on the first request before the redirect. |
| CVE-2025-3329 | Low | 2025-04-07 | Not applicable | Proof of concept only | A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. |
| CVE-2025-2861 | Medium | 2025-03-28 | Not applicable | No public exploit | SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing has the problem that information is exchanged in unencrypted text. Since sensitive data such as credentials are exchanged, an attacker could obtain them and log in legitimately. |
| CVE-2024-45361 | Medium | 2025-03-27 | Not applicable | No public exploit | A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information. |
| CVE-2025-2311 | Critical | 2025-03-20 | Not applicable | No public exploit | Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring. This issue affects SecHard: before 3.3.0.20220411. |
| CVE-2024-10718 | High | 2025-03-20 | Not applicable | Proof of concept only | In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0. |
| CVE-2024-44276 | High | 2025-03-17 | Not applicable | No public exploit | This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2. A user in a privileged network position may be able to leak sensitive information. |
| CVE-2025-27594 | High | 2025-03-14 | Not applicable | No public exploit | The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and device authentication is performed. An attacker can thereby intercept the authentication hash and use it to log into the device using a pass-the-hash attack. |
| CVE-2024-13872 | Critical | 2025-03-12 | Not applicable | No public exploit | Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and detection rules on the devices. Updates can be remotely triggered through the /set_temp_token API method. Then, an unauthenticated and network-adjacent attacker can use man-in-the-middle (MITM) techniques to return malicious responses. Restarted daemons that use malicious assets can then be exploited for remote code execution on the device. |
| CVE-2025-22493 | Medium | 2025-03-05 | Not applicable | No public exploit | Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100. |
| CVE-2025-25728 | Medium | 2025-02-28 | Not applicable | No public exploit | Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send communications to the update API in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. |
| CVE-2025-24849 | High | 2025-02-28 | Not applicable | No public exploit | Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure. |
| CVE-2022-41545 | Medium | 2025-02-18 | Not applicable | Proof of concept only | The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authenticates users via basic authentication, with an HTTP header containing a base64 value of the plaintext username and password. Because the web server also does not utilize transport security by default, this renders the administrative credentials vulnerable to eavesdropping by an adversary during every authenticated request made by a client to the router over a WLAN, or a LAN, should the adversary be able to perform a man-in-the-middle attack. |
| CVE-2024-5462 | Medium | 2025-02-15 | Not applicable | No public exploit | If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed in a configupload capture or a supportsave capture if encryption of passwords is not enabled. An attacker can use these passwords to fetch values of the supported OIDs via SNMPv3 queries. There are also a limited number of MIB objects that can be modified. |
| CVE-2025-1060 | High | 2025-02-13 | Not applicable | No public exploit | CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker. |
| CVE-2025-0556 | High | 2025-02-12 | Not applicable | No public exploit | In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing. |
| CVE-2024-36558 | High | 2025-02-06 | Not applicable | No public exploit | Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication. |
| CVE-2025-23060 | High | 2025-02-04 | Outside Waratek scope | No public exploit | A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering. |
| CVE-2024-43187 | High | 2025-02-04 | Not applicable | No public exploit | IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
| CVE-2023-35017 | Medium | 2025-01-29 | Not applicable | No public exploit | IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques. |
| CVE-2025-0784 | Medium | 2025-01-28 | Not applicable | Proof of concept only | A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.21.59 is able to address this issue. It is recommended to upgrade the affected component. |
| CVE-2025-0631 | High | 2025-01-28 | Not applicable | No public exploit | A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text. |
| CVE-2025-0432 | Medium | 2025-01-28 | Not applicable | Proof of concept only | EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage. |
| CVE-2024-28786 | Medium | 2025-01-28 | Not applicable | No public exploit | IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques. |
| CVE-2024-41757 | Medium | 2025-01-24 | Not applicable | No public exploit | IBM Concert Software 1.0.0 and 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. |
| CVE-2024-26155 | Medium | 2025-01-17 | Not applicable | No public exploit | All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the web portal. An attacker can access the ETIC RAS web portal and view the HTML code, which is configured to be hidden, thus allowing a connection to the ETIC RAS ssh server, which could enable an attacker to perform actions on the device. |
| CVE-2024-48121 | Medium | 2025-01-15 | Not applicable | Proof of concept only | The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack. |
| CVE-2024-45102 | Medium | 2025-01-14 | Not applicable | No public exploit | A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SSO) provider for XCC instances. |
| CVE-2024-42181 | High | 2025-01-12 | Not applicable | No public exploit | HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
| CVE-2024-46505 | Critical | 2025-01-09 | Not applicable | Proof of concept only | Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities. |