CWE-319 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-319 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-116105A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of…0.3%보통6.3CVE-2026-85720The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and async…0.3%보통5.9CVE-2026-91988atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry back…0.3%심각9.2CVE-2026-100635SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where se…0.3%높음8.2CVE-2026-69212Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect cl…0.2%보통5.9CVE-2026-107231The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and async…0.2%높음8.7CVE-2026-107714The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::…0.2%보통5.9CVE-2026-86689Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time da…0.2%높음8.2
전체 목록
60건
CVE-2026-53986Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcode…0.2%보통6.9
CVE-2026-85719The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously …0.2%높음7.5
CVE-2026-107232The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously …0.2%높음7.5
CVE-2026-96550A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue af…0.2%낮음2.9
CVE-2026-115797A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web M…0.2%낮음2.9
CVE-2026-107285The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously …0.2%보통5.9
CVE-2026-105245A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info…0.2%낮음2.9
CVE-2026-108716mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode tha…0.2%보통6.0
CVE-2026-111594InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to vie…0.2%심각9.2
CVE-2026-116114A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the f…0.2%낮음2.9
CVE-2026-88013rclone is a command-line program to sync files and directories to and from different cloud storage providers. …0.2%낮음3.7
CVE-2026-107282The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously …0.2%심각9.4
CVE-2026-87482Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 al…0.2%미평가
CVE-2026-85975Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transp…0.2%높음7.5
CVE-2026-82826Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Info…0.2%높음8.7
CVE-2026-103098Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP …0.2%높음7.5
CVE-2026-31278An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X …0.2%높음7.7
CVE-2026-116200Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path att…0.2%높음8.2
CVE-2025-36421IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that coul…0.2%보통5.9
CVE-2026-67105HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an att…0.2%높음7.4
CVE-2026-73174Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in th…0.1%높음8.7
CVE-2026-104704Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail ex…0.1%높음7.4
CVE-2026-21812HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability…0.1%낮음2.2
CVE-2026-54586mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_index(), mport_fetch_bootstrap_index…0.1%보통6.0
CVE-2026-85973Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-manageme…0.1%높음7.4
CVE-2026-76114Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmiss…0.1%보통5.9
CVE-2026-14984Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allow…0.1%심각9.4
CVE-2026-107692The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet…0.1%보통4.8
CVE-2026-18176IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive…0.1%높음7.4
CVE-2026-18134IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive…0.1%높음7.5
CVE-2026-82585The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connecti…0.1%높음7.1
CVE-2026-64893- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In…0.1%높음7.3
CVE-2026-116166SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kerne…0.1%높음7.6
CVE-2026-70379When the vSolution Matrix feature is enabled, affected devices may make current screen content available throu…0.1%높음7.1
CVE-2026-71216PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint…0.1%미평가
CVE-2026-55394Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent una…0.1%보통5.3
CVE-2026-101057utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs give…0.1%낮음2.3
CVE-2026-79588U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HT…0.1%보통4.3
CVE-2026-55396Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic i…0.1%높음8.5
CVE-2026-105766Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguar…0.1%낮음2.3
CVE-2026-102670Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.0.1%보통5.3
CVE-2026-15102ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitatio…0.1%높음7.5
CVE-2026-118373LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards t…0.1%보통6.3
CVE-2026-116844Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen che…0.1%보통6.3
CVE-2026-92543Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries(…0.1%높음7.6
CVE-2026-107121A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTL…0.1%보통6.5
CVE-2026-85628Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe ap…0.1%높음7.0
CVE-2026-115495Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for…0.1%보통5.7
CVE-2026-92832IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information…0.1%보통5.1
CVE-2026-81330The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The …0.1%높음7.1
CVE-2026-116196Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live accou…0.1%보통6.0
CVE-2018-6019Samsung Display Solutions App before 3.02 for Android allows man-in-the-middle attackers to spoof B2B content …보통5.9
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.