CWE-319 敏感数据的明文传输 类弱点 411 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-319 指敏感信息在通信过程中以明文形式传输，易被网络嗅探。攻击者通常利用中间人攻击或公共 Wi-Fi 环境截获数据，窃取凭证或隐私。开发者应避免使用 HTTP 等未加密协议，强制实施 TLS/SSL 加密传输，并对关键数据进行端到端加密，确保即使数据被拦截也无法被解读，从而保障通信安全。
try { URL u = new URL("http://www.secret.example.org/"); HttpURLConnection hu = (HttpURLConnection) u.openConnection(); hu.setRequestMethod("PUT"); hu.connect(); OutputStream os = hu.getOutputStream(); hu.disconnect(); } catch (IOException e) { //... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-25178 | Rockwell Automation ISaGRAF 安全漏洞 — ISaGRAF Runtime | 7.5 | High | 2022-03-18 |
| CVE-2022-21798 | General Electric Proficy Cimplicity 安全漏洞 — Proficy CIMPLICITY | 7.5 | High | 2022-02-25 |
| CVE-2022-0162 | Tp-link TL-WR841N 安全漏洞 — TL-WR841N | 8.4 | High | 2022-02-09 |
| CVE-2021-4161 | Moxa MGate 多款产品安全漏洞 — MGate MB3180 Series | 9.8 | Critical | 2021-12-27 |
| CVE-2021-3792 | Binatone Motorola-branded Camera 安全漏洞 — Binatone Hubble Cameras | 5.3 | Medium | 2021-11-12 |
| CVE-2021-3774 | Meross Smart Wi-Fi 2 Way Wall Switch 安全漏洞 — Meross Smart Wi-Fi 2 Way Wall Switch | 7.4 | High | 2021-11-05 |
| CVE-2021-42699 | AzeoTech DAQFactory 信息泄露漏洞 — DAQFactory | 5.7 | Medium | 2021-11-05 |
| CVE-2021-38418 | Delta Electronics DiaLink 安全漏洞 — DIALink | 8.8 | High | 2021-11-03 |
| CVE-2021-0296 | Juniper Networks CtpView输入验证错误漏洞 — CTPView | 7.4 | High | 2021-10-19 |
| CVE-2021-20599 | Mitsubishi Electric MELSEC iQ-R series 安全漏洞 — MELSEC iQ-R Series Safety CPU R08SFCPU | 9.1 | Critical | 2021-10-14 |
| CVE-2021-39342 | WordPress plugin Credova_Financial 安全漏洞 — Credova_Financial | 5.3 | Medium | 2021-09-29 |
| CVE-2021-22923 | Arch Linux 信任管理问题漏洞 — https://github.com/curl/curl | 5.3 | - | 2021-08-05 |
| CVE-2021-23846 | Bosch B426 安全漏洞 — B426 Firmware | 8.8 | High | 2021-06-18 |
| CVE-2021-23896 | Mcafee Database Security Server 安全漏洞 — McAfee Database Security (DBSec) | 3.2 | Low | 2021-06-02 |
| CVE-2021-23018 | Nginx 控制器 安全漏洞 — Nginx Controller | 5.9 | - | 2021-06-01 |
| CVE-2021-32456 | Sitel CAP/PRX 安全漏洞 — CAP/PRX | 6.5 | Medium | 2021-05-17 |
| CVE-2021-3494 | Foreman 安全漏洞 — foreman | 5.9 | - | 2021-04-26 |
| CVE-2021-20992 | Fibaro Home Center 2 安全漏洞 — Fibaro Home Center | 8.1 | High | 2021-04-19 |
| CVE-2020-7308 | Mcafee McAfee Endpoint Security 安全漏洞 — McAfee Endpoint Security (ENS) for WIndows | 4.8 | Medium | 2021-04-15 |
| CVE-2021-23884 | 迈克菲 McAfee Content Security Reporter 安全漏洞 — McAfee Content Security Reporter (CSR) | 4.3 | Medium | 2021-04-15 |
| CVE-2021-27251 | Netgear NETGEAR 安全漏洞 — R7800 | 8.8 | - | 2021-04-14 |
| CVE-2021-3473 | Lenovo XClarity Controller 安全漏洞 — XClarity Controller (XCC) | 4.5 | Medium | 2021-04-13 |
| CVE-2021-21387 | Parabirb wrongthink 安全漏洞 — wrongthink | 8.1 | High | 2021-03-19 |
| CVE-2019-18231 | Advantech Spectre RT ERT351 firmware 安全漏洞 — Advantech Spectre RT ERT351 | 7.5 | - | 2021-03-17 |
| CVE-2021-3417 | Lenovo XClarity Orchestrator 安全漏洞 — XClarity Orchestrator | 4.9 | Medium | 2021-03-09 |
| CVE-2020-8356 | 联想 Lenovo XClarity Orchestrator 安全漏洞 — XClarity Orchestrator | 4.9 | Medium | 2021-03-09 |
| CVE-2021-26564 | Synology DiskStation Manager 安全漏洞 — Synology DiskStation Manager (DSM) | 8.3 | High | 2021-02-26 |
| CVE-2021-26565 | Synology DiskStation Manager 安全漏洞 — Synology DiskStation Manager (DSM) | 8.3 | High | 2021-02-26 |
| CVE-2021-26560 | Synology DiskStation Manager 安全漏洞 — Synology DiskStation Manager (DSM) | 9.0 | Critical | 2021-02-26 |
| CVE-2021-22703 | Schneider PowerLogic 产品信息泄露漏洞 — PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) | 7.5 | - | 2021-02-19 |
CWE-319（敏感数据的明文传输） 是常见的弱点类别，本平台收录该类弱点关联的 411 条 CVE 漏洞。