CWE-311 敏感数据加密缺失 类弱点 270 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-311指敏感数据在存储或传输过程中缺乏加密保护的安全漏洞。攻击者常通过窃听网络流量或非法访问存储介质，直接读取明文敏感信息，导致数据泄露。开发者应避免此风险，确保对密码、个人身份信息等关键数据实施强加密算法，并在传输时采用TLS等安全协议，以保障数据的机密性与完整性。
function persistLogin($username, $password){ $data = array("username" => $username, "password"=> $password); setcookie ("userdata", $data); }server.sin_family = AF_INET; hp = gethostbyname(argv[1]); if (hp==NULL) error("Unknown host"); memcpy( (char *)&server.sin_addr,(char *)hp->h_addr,hp->h_length); if (argc < 3) port = 80; else port = (unsigned short)atoi(argv[3]); server.sin_port = htons(port); if (connect(sock, (struct sockaddr *)&server, sizeof server) < 0) error("Connecting"); ... while ((n=read(sock,buffer,BUFSIZE-1))!=-1) { write(dfd,password_buffer,n); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-22386 | IBM Security Verify Privilege Manager 安全漏洞 — Security Verify Privilege | 5.3 | Medium | 2023-10-17 |
| CVE-2022-22377 | IBM Security Verify Privilege Manager 安全漏洞 — Security Verify Privilege | 5.3 | Medium | 2023-10-17 |
| CVE-2022-33161 | IBM Security Directory Server 安全漏洞 — Security Directory Server | 5.3 | Medium | 2023-10-14 |
| CVE-2023-23371 | QNAP Systems QVPN 安全漏洞 — QVPN Windows | 5.2 | Medium | 2023-10-06 |
| CVE-2022-22405 | IBM Aspera 安全漏洞 — Aspera Faspex | 5.9 | Medium | 2023-09-08 |
| CVE-2023-33833 | IBM Security Verify Information Queue 安全漏洞 — Security Verify Information Queue | 2.9 | Low | 2023-08-31 |
| CVE-2023-40251 | Genians Genian NAC 安全漏洞 — Genian NAC V4.0 | 5.2 | Medium | 2023-08-17 |
| CVE-2023-4384 | MaximaTech Portal Executivo 安全漏洞 — Portal Executivo | 3.7 | Low | 2023-08-16 |
| CVE-2023-39954 | Nextcloud user_oidc 安全漏洞 — security-advisories | 3.8 | Low | 2023-08-10 |
| CVE-2023-37858 | PHOENIX CONTACTs WP 6xxx series web panels 信任管理问题漏洞 — WP 6070-WVPS | 4.9 | Medium | 2023-08-09 |
| CVE-2023-38699 | MindsDB 安全漏洞 — mindsdb | 9.1 | Critical | 2023-08-04 |
| CVE-2023-38688 | twitch-tui 安全漏洞 — twitch-tui | 7.5 | High | 2023-08-04 |
| CVE-2023-30561 | BD Alaris System with Guardrails Suite MX 安全漏洞 — BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015 | 6.1 | Medium | 2023-07-13 |
| CVE-2023-33849 | IBM CICS TX 安全漏洞 — TXSeries for Multiplatforms | 3.7 | Low | 2023-06-07 |
| CVE-2023-28045 | Dell CloudIQ 安全漏洞 — CloudIQ Collector | 6.3 | Medium | 2023-05-19 |
| CVE-2023-28841 | Moby 安全漏洞 — moby | 6.8 | Medium | 2023-04-04 |
| CVE-2022-38458 | NETGEAR RBR750 安全漏洞 — Orbi Router RBR750 | 6.5 | Medium | 2023-03-21 |
| CVE-2022-3781 | Devolutions Remote Desktop Manager 安全漏洞 — Remote Desktop Manager | 6.5 | - | 2022-11-01 |
| CVE-2022-41627 | AliveCor KardiaMobile 安全漏洞 — KardiaMobile | 4.8 | Medium | 2022-10-27 |
| CVE-2022-39014 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform (CMC) | 7.5 | - | 2022-09-13 |
| CVE-2022-26390 | Baxter Spectrum 安全漏洞 — Baxter Spectrum Wireless Battery Module (WBM) | 4.2 | Medium | 2022-09-09 |
| CVE-2022-38194 | Esri Portal for ArcGIS 安全漏洞 — Portal for ArcGIS | 6.7 | Medium | 2022-08-16 |
| CVE-2020-35168 | Dell BSAFE 安全漏洞 — Dell BSAFE Crypto-C Micro Edition | 4.7 | Medium | 2022-07-11 |
| CVE-2022-31085 | LDAP Account Manager 跨站脚本漏洞 — lam | 5.3 | - | 2022-06-27 |
| CVE-2022-30237 | Schneider Electric Wiser Smart 安全漏洞 — Wiser Smart | 8.2 | High | 2022-06-02 |
| CVE-2021-27783 | HCL Technologies BigFix Mobile/Modern Client Management 安全漏洞 — HCL BigFix Mobile / Modern Client Management | 6.8 | Medium | 2022-05-25 |
| CVE-2021-27779 | HCL Technologies VersionVault Express 安全漏洞 — HCL VersionVault Express | 9.1 | Critical | 2022-05-25 |
| CVE-2021-21963 | Sealevel Systems SeaConnect 370w 安全漏洞 — Sealevel | 6.8 | - | 2022-02-04 |
| CVE-2020-9058 | Silicon Labs Z-Wave Chipsets 安全漏洞 — LB60Z-1 | 8.1 | - | 2022-01-07 |
| CVE-2020-9057 | Z-Wave 安全漏洞 — WADWAZ-1 | 8.8 | - | 2022-01-07 |
CWE-311（敏感数据加密缺失） 是常见的弱点类别，本平台收录该类弱点关联的 270 条 CVE 漏洞。