CWE-319 敏感数据的明文传输 类弱点 370 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-319 指敏感信息在通信过程中以明文形式传输，易被网络嗅探。攻击者通常利用中间人攻击或公共 Wi-Fi 环境截获数据，窃取凭证或隐私。开发者应避免使用 HTTP 等未加密协议，强制实施 TLS/SSL 加密传输，并对关键数据进行端到端加密，确保即使数据被拦截也无法被解读，从而保障通信安全。
try { URL u = new URL("http://www.secret.example.org/"); HttpURLConnection hu = (HttpURLConnection) u.openConnection(); hu.setRequestMethod("PUT"); hu.connect(); OutputStream os = hu.getOutputStream(); hu.disconnect(); } catch (IOException e) { //... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-11946 | iXsystems TrueNAS CORE 安全漏洞 — TrueNAS CORE | 8.1 | - | 2024-12-30 |
| CVE-2021-39081 | IBM Cognos Analytics Mobile 安全漏洞 — Cognos Analytics Mobile for Android | 5.9 | Medium | 2024-12-19 |
| CVE-2024-10973 | Red Hat Keycloak 安全漏洞 | 5.7 | Medium | 2024-12-17 |
| CVE-2024-49820 | IBM Security Guardium Key Lifecycle Manager 安全漏洞 — Security Guardium Key Lifecycle Manager | 3.7 | Low | 2024-12-17 |
| CVE-2024-49819 | IBM Security Guardium Key Lifecycle Manager 安全漏洞 — Security Guardium Key Lifecycle Manager | 4.1 | Medium | 2024-12-17 |
| CVE-2024-53246 | Splunk Cloud Platform和Splunk Enterprise 安全漏洞 — Splunk Enterprise | 5.3 | Medium | 2024-12-10 |
| CVE-2024-47577 | SAP Commerce Cloud 安全漏洞 — SAP Commerce Cloud | 2.7 | Low | 2024-12-10 |
| CVE-2024-6515 | ABB ASPECT 安全漏洞 — ASPECT-Enterprise | 9.6 | Critical | 2024-12-05 |
| CVE-2021-29892 | IBM Cognos Controller 安全漏洞 — Cognos Controller | 5.9 | Medium | 2024-12-03 |
| CVE-2024-9834 | Baxter Life2000 安全漏洞 — Life2000 Ventilation System | 9.3 | Critical | 2024-11-14 |
| CVE-2024-32946 | LevelOne WBR-6012 安全漏洞 — WBR-6012 | 5.9 | Medium | 2024-10-30 |
| CVE-2024-8013 | MongoDB mongocryptd和MongoDB Mongo_crypt_v1.so 安全漏洞 — mongocryptd | 2.2 | Low | 2024-10-28 |
| CVE-2024-49387 | Acronis Cyber Protect 安全漏洞 — Acronis Cyber Protect 16 | 7.5 | - | 2024-10-15 |
| CVE-2024-9620 | Red Hat Ansible Automation Platform 安全漏洞 | 5.3 | Medium | 2024-10-08 |
| CVE-2024-47789 | D3D Security IP Camera 安全漏洞 — IP Camera D8801 | 7.5 | - | 2024-10-04 |
| CVE-2024-45838 | goTenna Pro 安全漏洞 — Pro ATAK Plugin | 4.3 | Medium | 2024-09-26 |
| CVE-2024-47124 | goTenna pro 安全漏洞 — Pro | 4.3 | Medium | 2024-09-26 |
| CVE-2024-45101 | Lenovo XClarity Administrator 安全漏洞 — XClarity Administrator | 6.8 | Medium | 2024-09-13 |
| CVE-2024-8059 | Lenovo XClarity Controller 安全漏洞 — HX5530 Appliance (ThinkAgile) XCC | 4.3 | Medium | 2024-09-13 |
| CVE-2024-44105 | Ivanti Workspace Control 安全漏洞 — Workspace Control | 8.2 | High | 2024-09-10 |
| CVE-2024-41927 | IDEC PLC多款产品 安全漏洞 — FC6A Series MICROSmart All-in-One CPU module | 9.1AI | CriticalAI | 2024-09-04 |
| CVE-2024-39746 | IBM Sterling Connect:Direct Web Services 安全漏洞 — Sterling Connect:Direct Web Services | 5.9 | Medium | 2024-08-22 |
| CVE-2024-31905 | IBM QRadar Network Packet Capture 安全漏洞 — QRadar Network Packet Capture | 5.9 | Medium | 2024-08-15 |
| CVE-2024-38167 | Microsoft Visual Studio和Microsoft .NET 安全漏洞 — Microsoft Visual Studio 2022 version 17.10 | 6.5 | Medium | 2024-08-13 |
| CVE-2024-7408 | Airveda Air Quality Monitor 安全漏洞 — Air Quality Monitor PM2.5 PM10 | 5.3AI | MediumAI | 2024-08-09 |
| CVE-2024-32864 | Johnson Controls exacqVision Web Service 安全漏洞 — exacqVision | 6.4 | Medium | 2024-08-01 |
| CVE-2024-41687 | SyroTech SY-GPON-1110-WDONT 安全漏洞 — SyroTech SY-GPON-1110-WDONT router | 9.8 | - | 2024-07-26 |
| CVE-2024-41124 | Puncia 安全漏洞 — puncia | 6.3 | Medium | 2024-07-19 |
| CVE-2024-5631 | Longse NVR 安全漏洞 — NVR3608PGE2W | 8.1AI | HighAI | 2024-07-09 |
| CVE-2024-37183 | Westermo L210-F2G Lynx 安全漏洞 — L210-F2G Lynx | 5.7 | Medium | 2024-06-20 |
CWE-319（敏感数据的明文传输） 是常见的弱点类别，本平台收录该类弱点关联的 370 条 CVE 漏洞。