257 vulnerabilities classified as CWE-311 (敏感数据加密缺失). AI Chinese analysis included.
CWE-311 represents a critical data protection weakness where software fails to encrypt sensitive information before storage or transmission, leaving confidential data exposed in plaintext. Attackers typically exploit this vulnerability by intercepting network traffic through man-in-the-middle attacks or by gaining unauthorized physical or logical access to storage systems, allowing them to read credentials, financial records, or personal identifiable information without obstruction. To mitigate this risk, developers must implement robust cryptographic standards, such as AES-256 for data at rest and TLS 1.3 for data in transit, ensuring that all sensitive payloads are securely encoded. Furthermore, rigorous code reviews and automated static analysis tools should be employed to detect missing encryption calls, while strict key management practices guarantee that cryptographic keys themselves remain protected from compromise, thereby maintaining the confidentiality and integrity of the entire system.
function persistLogin($username, $password){ $data = array("username" => $username, "password"=> $password); setcookie ("userdata", $data); }server.sin_family = AF_INET; hp = gethostbyname(argv[1]); if (hp==NULL) error("Unknown host"); memcpy( (char *)&server.sin_addr,(char *)hp->h_addr,hp->h_length); if (argc < 3) port = 80; else port = (unsigned short)atoi(argv[3]); server.sin_port = htons(port); if (connect(sock, (struct sockaddr *)&server, sizeof server) < 0) error("Connecting"); ... while ((n=read(sock,buffer,BUFSIZE-1))!=-1) { write(dfd,password_buffer,n); ...| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2016-10646 | resourcehacker 安全漏洞 — resourcehacker node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10647 | node-air-sdk 安全漏洞 — node-air-sdk node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10648 | marionette-socket-host 安全漏洞 — marionette-socket-host node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10649 | frames-compiler 安全漏洞 — frames-compiler node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10651 | webdriver-launcher 安全漏洞 — webdriver-launcher node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10652 | prebuild-lwip 安全漏洞 — prebuild-lwip node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10653 | xd-testing 安全漏洞 — xd-testing node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10654 | sfml 安全漏洞 — sfml node module | 7.4 | - | 2018-06-04 |
| CVE-2016-10655 | clang-extra 安全漏洞 — clang-extra node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10656 | qbs 安全漏洞 — qbs node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10657 | co-cli-installer 安全漏洞 — co-cli-installer node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10660 | fis-parser-sass-bin 安全漏洞 — fis-parser-sass-bin node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10661 | phantomjs-cheniu 安全漏洞 — phantomjs-cheniu node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10662 | tomita 安全漏洞 — tomita node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10663 | wixtoolset 安全漏洞 — wixtoolset node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10664 | msystem 安全漏洞 — mystem node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10665 | herbivore 安全漏洞 — herbivore node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10667 | selenium-portal 安全漏洞 — selenium-portal node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10668 | libsbml 安全漏洞 — libsbml node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10669 | soci 安全漏洞 — soci node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10670 | windows-seleniumjar-mirror 安全漏洞 — windows-seleniumjar-mirror node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10671 | mystem-wrapper 安全漏洞 — mystem-wrapper node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10672 | cloudpub-redis 安全漏洞 — cloudpub-redis node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10673 | ipip-coffee 安全漏洞 — ipip-coffee node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10675 | libsbmlsim 安全漏洞 — libsbmlsim node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10676 | rs-brightcove 安全漏洞 — rs-brightcove node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10677 | google-closure-tools-latest 安全漏洞 — google-closure-tools-latest node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10678 | serc.js 安全漏洞 — serc.js node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10683 | arcanist 安全漏洞 — arcanist node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10684 | healthcenter 安全漏洞 — healthcenter node module | 8.1 | - | 2018-06-04 |
Vulnerabilities classified as CWE-311 (敏感数据加密缺失) represent 257 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.