109 matches found
CVE-2025-53845
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
EUVD-2025-34233
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
CVE-2025-53845
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
CVE-2025-53845
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
CVE-2025-53845
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
CVE-2025-53845
Fortinet FortiAnalyzer is affected by CVE-2025-53845. Versions 7.6.0–7.6.3 and prior to 7.4.6 are vulnerable to an improper authentication vulnerability (CWE-287) that allows an unauthenticated attacker to obtain device health/status information or cause a denial of service via crafted OFTP reque...
PT-2025-41957
Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 7.6.0 through 7.6.3 Fortinet FortiAnalyzer versions prior to 7.4.6 Description An improper authentication issue exists in FortiAnalyzer. An unauthenticated attacker can obtain information about the device’s heal...
CVE-2025-10212
The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...
EUVD-2022-37718
Malicious code in bioql PyPI...
EUVD-2025-32288
Malicious code in bioql PyPI...
EUVD-2022-50143
Malicious code in bioql PyPI...
EUVD-2023-54043
Malicious code in bioql PyPI...
CVE-2025-10212
The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...
CVE-2025-10212
CVE-2025-10212 concerns the SiteAlert (Formerly WP Health) WordPress plugin. Connected documents confirm a missing capability check in multiple functions across versions up to and including 1.9.8, allowing unauthenticated access to site health information (e.g., installed/outdated plugins, PHP an...
CVE-2025-10212 SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure
The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...
PT-2025-40469
Name of the Vulnerable Software and Affected Versions SiteAlert Formerly WP Health plugin for WordPress versions through 1.9.8 Description The software is susceptible to unauthorized data access because of a missing capability check in several functions. This allows unauthenticated attackers to...
Google and Flo to pay $56 million after misusing users’ health data
Popular period-tracking app Flo Health shared users’ intimate health data—such as menstrual cycles and fertility information—with Google and Meta, allegedly for targeted advertising purposes, according to multiple class-action lawsuits filed in the US and Canada. Between 2016 and 2019, the...
MAL-2025-34243 Malicious code in sutter-health-data-services (npm)
The package sutter-health-data-services was found to contain malicious code...
Malicious code in sutter-health-data-services (npm)
The package sutter-health-data-services was found to contain malicious code...
Meta accessed women’s health data from Flo app without consent, says court
A jury has ruled that Meta accessed sensitive information from a woman's reproductive health tracking app without consent. The app in question is called Flo Health. Developed in 2015 in Belarus to track menstrual cycles, it has evolved over the years as a tracking app for highly detailed, intimat...