Authentication flaw

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate...

Code injection

SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via BLE...

CVE-2020-27272

SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop t...

CVE-2020-27272

CVE-2020-27272 affects Dana Diabecare RS pumps and AnyDana-i/AnyDana-A apps. Root cause: the BLE-based key exchange lacks adequate entity authentication, allowing unauthenticated, proximate attackers to eavesdrop on keys and spoof the pump. Impact includes potential manipulation of therapy settin...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

Code injection

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

CVE-2020-4881

CVE-2020-4881 affects IBM Planning Analytics 2.0. The root cause is the lack of server hostname verification in SSL/TLS communications, enabling a remote attacker to obtain sensitive information via a specially crafted request. Affected product: IBM Planning Analytics 2.0 (Planning Analytics Work...

SQL Injection Vulnerability in T_Pa***_Su***.aspx Page of KTO's Fully Intelligent Parking Video Charging System

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in the TPaSu.aspx page of KOTO's fully intelligent parking video charging system. An attacke...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-08434)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-08435)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-08431)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...

Huawei Data Communication: Out of Bounds Read Vulnerability in Several Products

There is an out-of-bounds read vulnerability in several products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Denial of Service Vulnerability in X188G of Shenzhen Meike Star Communication Technology Co.

The X188G is a router. The X188G has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in TL-ER6110G of P&L Technologies Ltd.

"TP-LINK" is a leading global supplier of network communication equipment. A denial of service vulnerability exists in the TL-ER6110G, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in WTC181 at P&L Technologies Ltd.

"TP-LINK" is a leading global supplier of network communication equipment. A denial of service vulnerability exists in WTC181 of TP-LINK, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in TL-XDR3250 of P&L Technologies Ltd.

"TP-LINK" is a leading global supplier of network communication equipment. A denial of service vulnerability exists in the TP-LINK TL-XDR3250, which can be exploited by attackers to cause a denial of service...

NVIDIA Windows GPU Display Driver (January 2021)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities: - NVIDIA GPU Display Driver contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service o...

Umbrella_android - Digital And Physical Security Advice App

Umbrella is an Android mobile app developed by Security First that provides human rights defenders with the information on what to do in any given security situation and the tools to do it. It allows the user to choose what they want to do, such as: protect data; securely make a call/email;...

Post-Backlash, WhatsApp Spells Out Privacy Policy Updates

WhatsApp is making explicit clarifications around its updated privacy policy, after reports ran amok about the messaging app mandating all-encompassing data-sharing with parent company Facebook. The app’s new privacy policy and terms of service, which will go into effect Feb. 8, says that WhatsAp...

Denial of Service Vulnerability in M18G of Shenzhen Meike Star Communication Technology Co.

The M18G is a wireless router. A denial-of-service vulnerability exists in the M18G of Shenzhen Meike Star Communication Technology Co. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully construct...