CVE-2018-18975: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communications between the app and Ascensia backend servers because of a weak certificate-pinning implementation, leading to disclosure of medical information...

PT-2019-9680

Name of the Vulnerable Software and Affected Versions Ascensia Contour NEXT ONE application for iOS and Android versions prior to 2019-01-15 Description The issue allows an attacker to retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object...

PT-2019-9681

Name of the Vulnerable Software and Affected Versions Ascensia Contour NEXT ONE application for Android versions prior to 2019-01-15 Description An issue in the Ascensia Contour NEXT ONE application allows an attacker to reverse engineer the codebase and extract sensitive data, potentially...

PT-2019-9682

Name of the Vulnerable Software and Affected Versions Ascensia Contour NEXT ONE application for Android versions prior to 2019-01-15 Description The issue concerns a statically coded encryption key in the application. This key can be extracted, allowing an attacker to decipher communications...

PT-2019-9683

Name of the Vulnerable Software and Affected Versions Ascensia Contour NEXT ONE application for Android versions prior to 2019-01-15 Description The issue concerns a statically coded initialization vector in the application, which can be extracted to decipher communications between the applicatio...

[SECURITY] Fedora 28 Update: kst-2.0.8-20.fc28

Kst is a real-time data viewing and plotting tool with basic data analysis functionality. Kst contains many powerful built-in features and is expandable with plugins and extensions. Main features of kst include: Robust plotting of live "streaming" data. Powerful keyboard and mouse plot...

DEBIAN-CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

PT-2017-18260

Name of the Vulnerable Software and Affected Versions FreeType 2 versions prior to 2017-03-26 Description The issue is caused by a heap-based buffer overflow related to the t1 builder close contour function in psaux/psobjs.c, resulting in an out-of-bounds write. Recommendations For versions prior...

alya.contourgroup.com XSS vulnerability

Vulnerable URL: http://alya.contourgroup.com/edocs/?brand="/%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...