CWE-311 敏感数据加密缺失 类弱点 270 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-311指敏感数据在存储或传输过程中缺乏加密保护的安全漏洞。攻击者常通过窃听网络流量或非法访问存储介质，直接读取明文敏感信息，导致数据泄露。开发者应避免此风险，确保对密码、个人身份信息等关键数据实施强加密算法，并在传输时采用TLS等安全协议，以保障数据的机密性与完整性。
function persistLogin($username, $password){ $data = array("username" => $username, "password"=> $password); setcookie ("userdata", $data); }server.sin_family = AF_INET; hp = gethostbyname(argv[1]); if (hp==NULL) error("Unknown host"); memcpy( (char *)&server.sin_addr,(char *)hp->h_addr,hp->h_length); if (argc < 3) port = 80; else port = (unsigned short)atoi(argv[3]); server.sin_port = htons(port); if (connect(sock, (struct sockaddr *)&server, sizeof server) < 0) error("Connecting"); ... while ((n=read(sock,buffer,BUFSIZE-1))!=-1) { write(dfd,password_buffer,n); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-24008 | Siemens SIRIUS 3RK3 Modular Safety System和Siemens SIRIUS Safety Relays 3SK2 安全漏洞 — SIRIUS 3RK3 Modular Safety System (MSS) | 6.5 | Medium | 2025-05-13 |
| CVE-2025-47274 | ToolHive 安全漏洞 — toolhive | 6.5AI | Medium AI | 2025-05-12 |
| CVE-2023-37405 | IBM Cloud Pak System 安全漏洞 — Cloud Pak System | 6.5 | Medium | 2025-03-27 |
| CVE-2025-1243 | api-go 安全漏洞 — api-go library | 8.2 | - | 2025-02-12 |
| CVE-2024-38325 | IBM Storage Defender 安全漏洞 — Storage Defender - Resiliency Service | 5.9 | Medium | 2025-01-27 |
| CVE-2024-7142 | CloudVision Portal 安全漏洞 — CloudVision Appliance | 4.6 | Medium | 2025-01-10 |
| CVE-2024-56439 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 7.5 | High | 2025-01-08 |
| CVE-2024-47871 | Gradio 安全漏洞 — gradio | 9.1AI | Critical AI | 2024-10-10 |
| CVE-2024-20515 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software | 6.5 | Medium | 2024-10-02 |
| CVE-2023-52948 | Synology Active Backup for Business Agent 安全漏洞 — Synology Active Backup for Business Agent | 5.0 | Medium | 2024-09-26 |
| CVE-2023-52950 | Synology Active Backup for Business Agent 安全漏洞 — Synology Active Backup for Business Agent | 5.3 | Medium | 2024-09-26 |
| CVE-2024-42495 | Hughes WL3000 Fusion Software 安全漏洞 — WL3000 Fusion Software | 6.5 | Medium | 2024-09-05 |
| CVE-2024-40620 | Rockwell Automation Pavilion8 安全漏洞 — Pavilion8® | 7.5AI | High AI | 2024-08-14 |
| CVE-2024-7396 | Korenix JetPort 5601 安全漏洞 — JetPort 5601v3 | 7.5AI | High AI | 2024-08-05 |
| CVE-2024-23444 | Elastic Elasticsearch 安全漏洞 — Elasticsearch | 4.9 | Medium | 2024-07-31 |
| CVE-2024-38302 | Dell Data Lakehouse 安全漏洞 — Dell Data Lakehouse | 6.8 | Medium | 2024-07-18 |
| CVE-2024-5731 | Trellix IPS Manager 安全漏洞 — Intrusion Prevention System (IPS) Manager | 6.8 | Medium | 2024-06-14 |
| CVE-2024-38283 | Motorola Solutions Vigilant License Plate Readers 安全漏洞 — Vigilant Fixed LPR Coms Box (BCAV1F2-C600) | 4.6AI | Medium AI | 2024-06-13 |
| CVE-2024-27106 | General Electric Healthcare Imaging 安全漏洞 — EchoPAC Software Only | 5.7 | Medium | 2024-05-14 |
| CVE-2024-25027 | IBM Security Verify Access 安全漏洞 — Security Verify Access Docker | 6.2 | Medium | 2024-03-31 |
| CVE-2023-35888 | IBM Security Verify Governance 安全漏洞 — Security Verify Governance | 5.9 | Medium | 2024-03-20 |
| CVE-2024-28250 | Cilium 安全漏洞 — cilium | 6.1 | Medium | 2024-03-18 |
| CVE-2024-28249 | Cilium 安全漏洞 — cilium | 6.1 | Medium | 2024-03-18 |
| CVE-2021-39090 | IBM Cloud Pak for Security 安全漏洞 — Cloud Pak for Security | 5.9 | Medium | 2024-02-29 |
| CVE-2024-25631 | Cilium 安全漏洞 — cilium | 6.1 | Medium | 2024-02-20 |
| CVE-2024-25630 | Cilium 安全漏洞 — cilium | 6.1 | Medium | 2024-02-20 |
| CVE-2023-38267 | IBM Security Access Manager Appliance 安全漏洞 — Security Verify Access Appliance | 6.2 | Medium | 2024-01-11 |
| CVE-2023-6339 | Google Nest 安全漏洞 — Wifi Pro | 10.0 | Critical | 2024-01-02 |
| CVE-2023-42019 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 5.9 | Medium | 2023-12-01 |
| CVE-2023-33228 | SolarWinds Network Configuration Manager 安全漏洞 — Network Configuration Manager | 4.5 | Medium | 2023-11-01 |
CWE-311（敏感数据加密缺失） 是常见的弱点类别，本平台收录该类弱点关联的 270 条 CVE 漏洞。