Search Vulnerabilities

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Fiber: HSTS header never set in helmet middleware due to incorrect protocol check

Vulnerabilities found in Watson Data Intelligence

Transmission of Sensitive Information found in Watson Data Intelligence

Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor data

Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)

Deno: TLS retry copies stale upgrade hook, risking plaintext traffic

HCL Connections is vulnerable to broken access control

Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext

Overview: A vulnerability has been found in FAST/TOOLS and CI Server

Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Cleartext Transmission of Sensitive Information

Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords

Client side encryption fails to encrypt values in a $vectorSearch

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models

Potential unencrypted email transmission via STARTTLS in the SMTP backend

A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2

HTTPS Fallback to HTTP in Graph Explorer

CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect

Missing authentication and clear‑text data transmission affecting Orca heat pumps

Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C