CWE-319 敏感数据的明文传输 类弱点 453 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-319 指敏感信息在通信过程中以明文形式传输，易被网络嗅探。攻击者通常利用中间人攻击或公共 Wi-Fi 环境截获数据，窃取凭证或隐私。开发者应避免使用 HTTP 等未加密协议，强制实施 TLS/SSL 加密传输，并对关键数据进行端到端加密，确保即使数据被拦截也无法被解读，从而保障通信安全。
try { URL u = new URL("http://www.secret.example.org/"); HttpURLConnection hu = (HttpURLConnection) u.openConnection(); hu.setRequestMethod("PUT"); hu.connect(); OutputStream os = hu.getOutputStream(); hu.disconnect(); } catch (IOException e) { //... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-7308 | Mcafee McAfee Endpoint Security 安全漏洞 — McAfee Endpoint Security (ENS) for WIndows | 4.8 | Medium | 2021-04-15 |
| CVE-2021-23884 | 迈克菲 McAfee Content Security Reporter 安全漏洞 — McAfee Content Security Reporter (CSR) | 4.3 | Medium | 2021-04-15 |
| CVE-2021-27251 | Netgear NETGEAR 安全漏洞 — R7800 | 8.8 | - | 2021-04-14 |
| CVE-2021-3473 | Lenovo XClarity Controller 安全漏洞 — XClarity Controller (XCC) | 4.5 | Medium | 2021-04-13 |
| CVE-2021-21387 | Parabirb wrongthink 安全漏洞 — wrongthink | 8.1 | High | 2021-03-19 |
| CVE-2019-18231 | Advantech Spectre RT ERT351 firmware 安全漏洞 — Advantech Spectre RT ERT351 | 7.5 | - | 2021-03-17 |
| CVE-2021-3417 | Lenovo XClarity Orchestrator 安全漏洞 — XClarity Orchestrator | 4.9 | Medium | 2021-03-09 |
| CVE-2020-8356 | 联想 Lenovo XClarity Orchestrator 安全漏洞 — XClarity Orchestrator | 4.9 | Medium | 2021-03-09 |
| CVE-2021-26564 | Synology DiskStation Manager 安全漏洞 — Synology DiskStation Manager (DSM) | 8.3 | High | 2021-02-26 |
| CVE-2021-26565 | Synology DiskStation Manager 安全漏洞 — Synology DiskStation Manager (DSM) | 8.3 | High | 2021-02-26 |
| CVE-2021-26560 | Synology DiskStation Manager 安全漏洞 — Synology DiskStation Manager (DSM) | 9.0 | Critical | 2021-02-26 |
| CVE-2021-22703 | Schneider PowerLogic 产品信息泄露漏洞 — PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) | 7.5 | - | 2021-02-19 |
| CVE-2021-22702 | Schneider PowerLogic 产品信息泄露漏洞 — PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) | 7.5 | - | 2021-02-19 |
| CVE-2021-20335 | Mongodb MongoDB Ops Manager 安全漏洞 — MongoDB Ops Manager | 6.7 | Medium | 2021-02-11 |
| CVE-2020-8355 | 联想 Lenovo XClarity Administrator 信息泄露漏洞 — XClarity Administrator | 4.9 | Medium | 2021-02-10 |
| CVE-2020-25169 | Reolink devices 信息泄露漏洞 — RLC-4XX series | 7.5 | - | 2021-01-26 |
| CVE-2021-21270 | Octopus DSC 安全漏洞 — OctopusDSC | 6.2 | Medium | 2021-01-22 |
| CVE-2020-25190 | Moxa NPort IAW5000A-I/O 安全漏洞 — NPort IAW5000A-I/O | 7.5 | High | 2020-12-23 |
| CVE-2020-13528 | Lantronix Xport Edge 安全漏洞 — Lantronix | 5.9 | - | 2020-12-17 |
| CVE-2020-25155 | NEXCOM NIO 50 输入验证错误 — NIO 50 | 7.5 | - | 2020-11-13 |
| CVE-2020-5426 | VMware Pivotal Scheduler 安全漏洞 — Pivotal Scheduler | 9.8 | - | 2020-11-11 |
| CVE-2020-27656 | Synology DiskStation Manager 信息泄露漏洞 — DiskStation Manager (DSM) | 6.5 | Medium | 2020-10-29 |
| CVE-2020-27657 | Synology Router Manager 安全漏洞 — Synology Router Manager (SRM) | 6.5 | Medium | 2020-10-29 |
| CVE-2020-25645 | Linux kernel 加密问题漏洞 — kernel | 7.5 | - | 2020-10-13 |
| CVE-2020-15785 | Siemens Siveillance Video Client 加密问题漏洞 — Siveillance Video Client | 5.3 | - | 2020-09-09 |
| CVE-2020-1749 | Linux kernel 安全漏洞 — kernel | 7.5 | High | 2020-09-09 |
| CVE-2020-3442 | Cisco DuoConnect 安全漏洞 — DUO Connect | 4.8 | Medium | 2020-07-20 |
| CVE-2020-7592 | 多款Siemens产品安全漏洞 — SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) | 8.1 | - | 2020-07-14 |
| CVE-2020-10281 | Micro Air Vehicle Link 安全漏洞 — MAVLink | 7.5 | - | 2020-07-03 |
| CVE-2019-18248 | Biotronik CardioMessenger II-S 安全漏洞 — BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM | 7.1 | - | 2020-06-29 |
CWE-319（敏感数据的明文传输） 是常见的弱点类别，本平台收录该类弱点关联的 453 条 CVE 漏洞。