#cwe-319

共收录 141 条相关情报。

← 返回所有主题
漏洞预警2026-10-05 发布INFO

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d...

CVE-2026-105766

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the file python/sglang/srt/entrypoints/http_server.py of the co...

CVE-2026-105245

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the fi

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

CVE-2026-105245

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the fi

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-02 发布INFO

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is...

CVE-2026-103098

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather th

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-02 发布INFO

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext acr...

CVE-2026-103098

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather th

历史摘要 · 未重新核验 · NVD

安全公告2026-10-02 发布INFO

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO...

CVE-2026-64893

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-01 发布INFO

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25.

CVE-2026-64893

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middl

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Cleartext transmission without a cryptographic integrity check in operator control unit to robot...

CVE-2026-55396

Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-01 发布INFO

Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows...

CVE-2026-55394

Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-01 发布INFO

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to...

CVE-2026-102670

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-01 发布INFO

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through...

CVE-2026-14984

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote u

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-01 发布INFO

Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9...

CVE-2026-55396

Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traf...

CVE-2026-55394

Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify ...

CVE-2026-14984

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.

CVE-2026-102670

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP tr...

CVE-2026-67105

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authenticatio...

CVE-2026-82826

Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated atta...

CVE-2026-76114

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sen

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP...

CVE-2026-101057

utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a cal

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-27 发布INFO

utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensure_...

CVE-2026-101057

utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a cal

历史摘要 · 未重新核验 · NVD