Advisories · Weakness
CWE-1428.
Every Advisory and CVE whose sources give the weakness CWE-1428, newest first.
- CVSS 8.9 High
Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution
- Sogou Input Method
- CWE-1428
- CVSS 2.3 Low
Lack of traffic encryption in Płatnik
- Zakład Ubezpieczeń Społecznych Płatnik
- CWE-1428
- CVSS 6.0 Medium
Cleartext Transmission of Sensitive Information in mH-DEVELOPER
- F&F Filipowski mH-DEVELOPER
- CWE-1428
- CVSS 7.0 High
PROMOD V is using insecure HTTP communication instead of HTTPS.
- Hitachi Energy PROMOD V
- CWE-1428
- CVSS 7.7 High
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
- AMD Management Console (AMC)
- AMD Ryzen™ Master
- CWE-1428