CWE-1428
5 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120422
Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution
Sogou · Sogou Input Method
High8.9 - CVE-2026-110970
Lack of traffic encryption in Płatnik
Zakład Ubezpieczeń Społecznych · Płatnik
Low2.3 - CVE-2026-82933
Cleartext Transmission of Sensitive Information in mH-DEVELOPER
F&F Filipowski · mH-DEVELOPER
Medium6.0 - CVE-2026-10763
PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server.
Hitachi Energy · PROMOD V
High7.0 - CVE-2026-40677
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary…
AMD · AMD Management Console (AMC)
High7.7