CVE-2018-18564

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 Serial number above KQ0400000 or KS0400000. Improper access control allow...

Improper access control

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 Serial...

CVE-2018-18563

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 Serial...

CVE-2018-18563

CVE-2018-18563 : Affected Roche Diagnostics handheld medical devices (Accu-Chek Inform II Instrument; CoaguChek Pro II; CoaguChek XS Plus/XS Pro; cobas h 232) prior to specific versions exhibit Improper Access Control to a service command. This allows attackers in the adjacent network to execute ...

PT-2018-14519

Name of the Vulnerable Software and Affected Versions Roche Accu-Chek Inform II Instrument versions before 03.06.00 Roche Accu-Chek Inform II Instrument versions 04.x before 04.03.00 CoaguChek Pro II versions before 04.03.00 CoaguChek XS Plus versions before 03.01.06 CoaguChek XS Pro versions...

CVE-2018-18563: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 Serial...

PT-2018-14518

Name of the Vulnerable Software and Affected Versions Roche Accu-Chek Inform II Instrument versions prior to 03.06.00 Serial number below 14000 Roche Accu-Chek Inform II Instrument versions 04.x prior to 04.03.00 Serial Number above 14000 CoaguChek Pro II versions prior to 04.03.00 cobas h 232...

PT-2018-14517

Name of the Vulnerable Software and Affected Versions Roche Accu-Chek Inform II Instrument versions prior to 03.06.00 Serial number below 14000 Roche Accu-Chek Inform II Instrument versions 04.x prior to 04.03.00 Serial Number above 14000 CoaguChek Pro II versions prior to 04.03.00 CoaguChek XS...

CVE-2018-18565: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 Serial...

CVE-2018-18564: Undefined Security Weakness

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 Serial number below 14000 and 04.x before 04.03.00 Serial Number above 14000, CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 Serial number above KQ0400000 or KS0400000. Improper access control allow...

Multiple Roche Device Permission License and Access Control Vulnerabilities (CNVD-2018-25431)

The Roche Accu-Chek Inform II Instrument, CoaguChek Pro II and cobas h 232 are handheld blood testing medical devices from Roche, Switzerland. A privilege-permission and access-control vulnerability exists in multiple Roche devices, which can be exploited by an attacker via a specially crafted...

h-norbertus.nl XSS vulnerability

Open Bug Bounty ID: OBB-695831 Description| Value ---|--- Affected Website:| h-norbertus.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

h-norbertus.nl XSS vulnerability

Open Bug Bounty ID: OBB-695352 Description| Value ---|--- Affected Website:| h-norbertus.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability

These vulnerabilities were discovered by Lilith Wyatt of Cisco Talos. Cisco Talos is disclosing a code execution vulnerability that has been identified in Live Networks LIVE555 streaming media RTSPServer. LIVE555 Streaming Media is a set of open-source C++ libraries developed by Live Networks Inc...

RHEL 7 : qemu-kvm-rhev (RHSA-2016:1607)

An update for qemu-kvm-rhev is now available for RHEV-H and Agents for RHEL-7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

h-c.nl XSS vulnerability

Open Bug Bounty ID: OBB-664243 Description| Value ---|--- Affected Website:| h-c.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bestsshops.cn XSS vulnerability

Open Bug Bounty ID: OBB-660966 Description| Value ---|--- Affected Website:| bestsshops.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hollywoodandhighland.com XSS vulnerability

Open Bug Bounty ID: OBB-655718 Description| Value ---|--- Affected Website:| hollywoodandhighland.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-3777 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel versions prior to 1.8.5 Description: The issue is related to an invalid read in the stb image.h component of libsixel, which can be exploited by attackers to cause a denial of service DOS via a crafted PSD file. This can be achieved ...

PT-2018-8971

Name of the Vulnerable Software and Affected Versions NEC Platforms Calsos CSDX series products versions 1.37210411 and earlier NEC Platforms Calsos CSDXP series products versions 4.37210411 and earlier NEC Platforms Calsos CSDXD series products versions 3.37210411 and earlier NEC Platforms Calso...