CVE-2025-20049 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

CVE-2025-20049

The CVE-2025-20049 entry concerns the Dario Health portal service application, which is vulnerable to cross-site scripting (XSS). The available connected data confirms XSS as the underlying issue and that an attacker could obtain sensitive information via this vulnerability in the portal service....

CVE-2025-20049 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

CVE-2025-24849 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure...

CVE-2025-24849 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure...

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

CVE-2025-23405 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Improper Output Neutralization For Logs

Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks ex log injection...

CVE-2025-23405 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Improper Output Neutralization For Logs

Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks ex log injection...

CVE-2025-20060 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Private Personal Information to an Unauthorized Actor

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

CVE-2025-20060

CVE-2025-20060 affects the Dario Health Android application and its database. An attacker could expose cross-user PII and PHI transmitted via the Dario Health app database. The available documents provide impact (privacy leakage) and CVSS-derived severity (high), but do not specify affected versi...

CVE-2025-20060 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Private Personal Information to an Unauthorized Actor

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

CVE-2025-1572

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the ‘uid’ parameter in all versions up to, and including, 3.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

PT-2025-9117 · Unknown · Dario Health

Name of the Vulnerable Software and Affected Versions: Dario Health affected versions not specified Description: The issue concerns the exposure of development environment details in the Dario Health Internet-based server infrastructure, potentially leading to unsafe functionality. Recommendation...

Dario Health USB-C Blood Glucose Monitoring System 安全漏洞

Dario Health USB-C Blood Glucose Monitoring System is a portable blood glucose monitoring device from Dario Health, Israel. A security vulnerability exists in the Dario Health USB-C Blood Glucose Monitoring System that stems from a cookie policy observable through built-in browser tools, which in...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic conditions. Dario Health has a security vulnerability that stems from the exposure of development environment details that could lead to unsafe functionality...

Dario Health USB-C Blood Glucose Monitoring System 安全漏洞

The Dario Health USB-C Blood Glucose Monitoring System is a portable blood glucose monitoring device from Dario Health, Israel. A security vulnerability exists in the Dario Health USB-C Blood Glucose Monitoring System that stems from unauthenticated logs affecting metrics collection and event...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for people with chronic conditions. Dario Health has a security vulnerability that stems from the potential to lead to the disclosure of cross-user personally identifiable and health information...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic conditions. Dario Health has a security vulnerability that stems from a lack of encryption during cloud infrastructure transfers, which could lead to the manipulation or disclosure of...

PT-2025-9115 · Dario Health · Dario Health Portal Service Application

Name of the Vulnerable Software and Affected Versions: Dario Health portal service application affected versions not specified Description: The issue allows an attacker to obtain sensitive information through a cross-site scripting XSS attack. Recommendations: At the moment, there is no informati...