Search Vulnerabilities

Flowise: Password Reset Link Sent Over Unsecured HTTP

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption

OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints

Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center

Anviz Products Cleartext Transmission of Sensitive Information

Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass)

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7

Apache APISIX: Openid-connect `tls_verify` field is disabled by default

Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP

Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information

Multiple Vulnerabilities in IBM Concert Software

A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information

Shenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmission

Automated Logic WebCTRL Premium Server Cleartext Transmission of Sensitive Information

Cryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes

Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP

IBM Sterling Partner Engagement Manager Information Disclosure