CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting improper redir...

CVE-2026-43625

CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept impo

历史摘要 · 未重新核验 · NVD

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead ...

CVE-2026-25599

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the

历史摘要 · 未重新核验 · NVD

stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation

### Impact Stigmem nodes with federation enabled could be configured to run without mTLS outside loopback-only local dev

历史摘要 · 未重新核验 · GitHub Advisory

AgenticMail API/storage and outbound relay hardening fixes

CVE-2026-47255

The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18.

历史摘要 · 未重新核验 · GitHub Advisory

Deno's TLS retry copies stale upgrade hook, risking plaintext traffic

CVE-2026-44726

## Summary A flaw in Deno's Node.js tls compatibility layer could cause a TLS client to transmit application data in pl

历史摘要 · 未重新核验 · GitHub Advisory

Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authen...

CVE-2024-47269

Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Stati

历史摘要 · 未重新核验 · NVD

NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to cod...

CVE-2026-24212

NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A s

历史摘要 · 未重新核验 · NVD

STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, pe...

CVE-2026-25608

CVE-2026-25608 是 STER 软件中的一个漏洞，该软件在网络上传输数据时使用未加密的 TCP 流量。攻击者可以利用此漏洞实施中间人（MITM）攻击，拦截并窃取敏感数据，包括密码、个人身份信息和认证令牌。由于通信未加密，攻击者能

历史摘要 · 未重新核验 · NVD

Foscam VD1 Video Doorbell before V5.3.13_1072 is vulnerable to Cleartext Transmission of Sensitive Information. The device transmits sensitive Session Description Protocol (SDP)...

CVE-2026-38740

Foscam VD1 Video Doorbell before V5.3.13_1072 is vulnerable to Cleartext Transmission of Sensitive Information. The devi

历史摘要 · 未重新核验 · NVD

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential intercep...

CVE-2025-62311

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. Th

历史摘要 · 未重新核验 · NVD

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interce...

CVE-2025-62310

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. T

历史摘要 · 未重新核验 · NVD

Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of...

CVE-2026-41281

Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CW

历史摘要 · 未重新核验 · GitHub Advisory

Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability. A man-in-the-middle attacker may ac...

CVE-2026-41281

Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CW

历史摘要 · 未重新核验 · NVD

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing...

CVE-2026-4873

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the s

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in cl...

CVE-2026-4873

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the s

历史摘要 · 未重新核验 · NVD

Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the statsd daemon is not secured (for example, by sending UDP pa...

CVE-2026-45180

Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the sta

历史摘要 · 未重新核验 · NVD

Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses. If the communication channel to the statsd daemon is not secured (for example, by sending U...

CVE-2026-45179

Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses. If the communication channel to th

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi of the component Firmware Update. Such manipulation lead...

CVE-2026-7610

A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi

历史摘要 · 未重新核验 · NVD

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses....

CVE-2026-42514

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker coul

历史摘要 · 未重新核验 · GitHub Advisory

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker could exploit this vulnerability by intercepting API response...

CVE-2026-42514

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker coul

历史摘要 · 未重新核验 · NVD