257 vulnerabilities classified as CWE-311 (敏感数据加密缺失). AI Chinese analysis included.
CWE-311 represents a critical data protection weakness where software fails to encrypt sensitive information before storage or transmission, leaving confidential data exposed in plaintext. Attackers typically exploit this vulnerability by intercepting network traffic through man-in-the-middle attacks or by gaining unauthorized physical or logical access to storage systems, allowing them to read credentials, financial records, or personal identifiable information without obstruction. To mitigate this risk, developers must implement robust cryptographic standards, such as AES-256 for data at rest and TLS 1.3 for data in transit, ensuring that all sensitive payloads are securely encoded. Furthermore, rigorous code reviews and automated static analysis tools should be employed to detect missing encryption calls, while strict key management practices guarantee that cryptographic keys themselves remain protected from compromise, thereby maintaining the confidentiality and integrity of the entire system.
function persistLogin($username, $password){ $data = array("username" => $username, "password"=> $password); setcookie ("userdata", $data); }server.sin_family = AF_INET; hp = gethostbyname(argv[1]); if (hp==NULL) error("Unknown host"); memcpy( (char *)&server.sin_addr,(char *)hp->h_addr,hp->h_length); if (argc < 3) port = 80; else port = (unsigned short)atoi(argv[3]); server.sin_port = htons(port); if (connect(sock, (struct sockaddr *)&server, sizeof server) < 0) error("Connecting"); ... while ((n=read(sock,buffer,BUFSIZE-1))!=-1) { write(dfd,password_buffer,n); ...| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2016-10605 | dalek-browser-ie 安全漏洞 — dalek-browser-ie node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10606 | grunt-webdriver-qunit 安全漏洞 — grunt-webdriver-qunit node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10607 | openframe-glsviewer 安全漏洞 — openframe-glslviewer node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10608 | robot-js 安全漏洞 — robot-js node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10609 | chromedriver126 安全漏洞 — chromedriver126 node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10610 | unicode-json 安全漏洞 — unicode-json node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10612 | dalek-browser-ie-canary 安全漏洞 — dalek-browser-ie-canary node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10613 | bionode-sra 安全漏洞 — bionode-sra node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10614 | httpsync 安全漏洞 — httpsync node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10615 | curses 安全漏洞 — curses node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10616 | openframe-image 安全漏洞 — openframe-image node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10617 | box2d-native 安全漏洞 — box2d-native node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10618 | node-browser 安全漏洞 — node-browser node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10619 | pennyworth 安全漏洞 — pennyworth node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10620 | atom-node-module-installer 安全漏洞 — atom-node-module-installer node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10621 | fibjs 安全漏洞 — fibjs node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10622 | nodeschnaps 安全漏洞 — nodeschnaps node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10623 | macaca-chromedriver-zxa 安全漏洞 — macaca-chromedriver-zxa node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10624 | selenium-chromedriver 安全漏洞 — selenium-chromedriver node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10625 | headless-browser-lite 安全漏洞 — headless-browser-lite node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10626 | mystem3 安全漏洞 — mystem3 node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10628 | selenium-wrapper 安全漏洞 — selenium-wrapper node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10629 | nw-with-arm 安全漏洞 — nw-with-arm node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10630 | install-g-tes 安全漏洞 — install-g-test node module | 5.9 | - | 2018-06-01 |
| CVE-2016-10631 | jvminstall安全漏洞 — jvminstall node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10632 | apk-parser2 安全漏洞 — apk-parser2 node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10633 | dwebp-bin 安全漏洞 — dwebp-bin node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10634 | scala-standalone-bin 安全漏洞 — scalajs-standalone-bin node module | 8.1 | - | 2018-06-01 |
| CVE-2016-10552 | igniteui 安全漏洞 — igniteui node module | 7.4 | - | 2018-05-31 |
| CVE-2016-10557 | appium-chromedriver 安全漏洞 — appium-chromedriver node module | 8.1 | - | 2018-05-31 |
Vulnerabilities classified as CWE-311 (敏感数据加密缺失) represent 257 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.