CWE-311

CWE-311 · 10 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-311, highest CVSS first.

  1. HIGH 7.8CVE-2026-788602026-10-05

    An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.2CVE-2026-863752026-10-19

    Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.4CVE-2026-351102026-11-06

    HCL AION is affected by a vulnerability where encrypted (HTTPS) communication was not enforced for all requests. Data may be transmitted over unencrypted connections and intercepted by an attacker on the network, potentially resulting in unintended behavior or…

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 4.3CVE-2026-116198public PoC2026-10-25

    Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encrypted_custom_fields. Authenticated API users without that permi…

    snipe-it

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 4.3CVE-2026-115247public PoC2026-10-22

    A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument pat_pswd/do…

    AI risk analysis on Exploit-DB.ai →

  6. LOW 3.7CVE-2026-53452026-11-06

    HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface. The connection used the unencrypted WebSocket protocol (ws://test) instead of an encrypted (wss://) channel. This may allow data exc…

    AI risk analysis on Exploit-DB.ai →

  7. LOW 3.7CVE-2026-218492026-11-06

    HCL AION is affected by a missing encryption vulnerability in the WebSocket connection set up by the GenAI web interface. The connection used the unencrypted WebSocket protocol (ws://localhost:8000) instead of an encrypted (wss://) channel. This may allow data…

    AI risk analysis on Exploit-DB.ai →

  8. LOW 2.7CVE-2026-1051792026-10-05

    A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption…

    AI risk analysis on Exploit-DB.ai →

  9. UNSCOREDCVE-2026-438542026-10-20

    A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

    AI risk analysis on Exploit-DB.ai →

  10. UNSCOREDCVE-2026-111063public PoC2026-10-19

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. …

    AI risk analysis on Exploit-DB.ai →