Skip to content
BackEsc
Sign in

CWE-311 · weakness in Cryptography

Missing Encryption of Sensitive Data

461 CVEs · 1 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
check available
1

Every one of the 461 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code ExecutionCVE-2026-34486Apache Software Foundation · CVSS 7.5 · 99% likelycovered by CyberSIXT

    Apache

  2. Nginx UI < 2.3.3 - Information DisclosureCVE-2026-279440xJacky · CVSS 9.8 · 23% likelycovered by CyberSIXT

    0xJacky

  3. An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attrib…CVE-2019-113672.8% likely
  4. Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android application and a camera device, whic…CVE-2017-82212.7% likely
  5. An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM posit…CVE-2018-106982.3% likely
  6. ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. Before 2.5.6, it may be possible to c…CVE-2016-10593HackerOne · 2.3% likely

    HackerOne

  7. windows-build-tools is a module for installing C++ Build Tools for Windows using npm. windows-build-tools versions below 1.0.0 download resources over HTTP, which leaves it vulner…CVE-2017-16003HackerOne · 2.2% likely

    HackerOne

  8. wixtoolset is a Node module wrapper around the wixtoolset binaries wixtoolset downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible…CVE-2016-10663HackerOne · 2.2% likely

    HackerOne

  9. herbivore is a packet sniffing and crafting library. Built on libtins herbivore 0.0.3 and below download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It…CVE-2016-10665HackerOne · 2.1% likely

    HackerOne

  10. Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file whic…CVE-2019-0307SAP SE · 2.1% likely

    SAP

  11. Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdroppi…CVE-2018-1340Apache Software Foundation · 2.0% likely

    Apache

  12. alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows. alto-saxophone versions below 2.25.1 download binary resources over HTTP, which leaves it…CVE-2016-10694HackerOne · 2.0% likely

    HackerOne

  13. fis-sass-all is another libsass wrapper for node. fis-sass-all downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote…CVE-2016-10686HackerOne · 2.0% likely

    HackerOne

  14. frames-compiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the reque…CVE-2016-10649HackerOne · 2.0% likely

    HackerOne

  15. cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execut…CVE-2016-10642HackerOne · 2.0% likely

    HackerOne

  16. selenium-wrapper is a selenium server wrapper, including installation and chrome webdriver. selenium-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MI…CVE-2016-10628HackerOne · 2.0% likely

    HackerOne

  17. selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary resources over HTTP, which leaves it vuln…CVE-2016-10624HackerOne · 2.0% likely

    HackerOne

  18. dalek-browser-chrome is Google Chrome bindings for DalekJS. dalek-browser-chrome downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possib…CVE-2016-10604HackerOne · 2.0% likely

    HackerOne

  19. webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote…CVE-2016-10600HackerOne · 2.0% likely

    HackerOne

  20. baryton-saxophone is a module to install and launch Selenium Server for Mac, Linux and Windows. baryton-saxophone versions below 3.0.1 download binary resources over HTTP, which l…CVE-2016-10573HackerOne · 2.0% likely

    HackerOne

  21. dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attac…CVE-2016-10584HackerOne · 2.0% likely

    HackerOne

  22. nodeschnaps is a NodeJS compatibility layer for Java (Rhino). nodeschnaps downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to c…CVE-2016-10622HackerOne · 2.0% likely

    HackerOne

  23. IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the failure to encrypt ORB communication. IBM X-Force ID: 145455.CVE-2018-1683IBM · CVSS 5.9 · 2.0% likely

    IBM

  24. selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver. selenium-standalone-painful downloads binary resources…CVE-2016-10679HackerOne · 2.0% likely

    HackerOne

  25. libsbmlsim is a module that installs linux binaries for libsbmlsim libsbmlsim downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible…CVE-2016-10675HackerOne · 2.0% likely

    HackerOne

  26. libsbml is a module that installs Linux binaries for libSBML libsbml downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote…CVE-2016-10668HackerOne · 2.0% likely

    HackerOne

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in