Lucene search
+L

3553 matches found

Cvelist
Cvelist
•added 2025/02/28 4:58 p.m.•22 views

CVE-2025-24849 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure...

7.5CVSS0.0009EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 4:58 p.m.•8 views

CVE-2025-24849 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure...

7.5CVSS7AI score0.0009EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 4:56 p.m.•22 views

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS0.00152EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 4:56 p.m.•12 views

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS5.3AI score0.00152EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 4:54 p.m.•11 views

CVE-2025-23405 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Improper Output Neutralization For Logs

Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks ex log injection...

6.9CVSS5.6AI score0.00291EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 4:54 p.m.•33 views

CVE-2025-23405 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Improper Output Neutralization For Logs

Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks ex log injection...

6.9CVSS0.00291EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 4:51 p.m.•10 views

CVE-2025-20060 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Private Personal Information to an Unauthorized Actor

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

8.7CVSS7.3AI score0.00398EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 4:51 p.m.•24 views

CVE-2025-20060 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Private Personal Information to an Unauthorized Actor

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

8.7CVSS0.00398EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/28 4:51 p.m.•101 views

CVE-2025-20060

CVE-2025-20060 affects the Dario Health Android application and its database. An attacker could expose cross-user PII and PHI transmitted via the Dario Health app database. The available documents provide impact (privacy leakage) and CVSS-derived severity (high), but do not specify affected versi...

8.7CVSS6.6AI score0.00398EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/28 8:15 a.m.•23 views

CVE-2025-1572

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the ‘uid’ parameter in all versions up to, and including, 3.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

8.8CVSS5.9AI score0.00526EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/28 12:00 a.m.•3 views

CVE-2025-20049: Improper Neutralization of Input During Web Page Generation

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

7.1CVSS5.8AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•13 views

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for people with chronic conditions. Dario Health has a security vulnerability that stems from the potential to lead to the disclosure of cross-user personally identifiable and health information...

8.7CVSS6.5AI score0.00398EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/28 12:00 a.m.•16 views

PT-2025-9115 · Dario Health · Dario Health Portal Service Application

Name of the Vulnerable Software and Affected Versions: Dario Health portal service application affected versions not specified Description: The issue allows an attacker to obtain sensitive information through a cross-site scripting XSS attack. Recommendations: At the moment, there is no informati...

7.1CVSS5.9AI score0.00299EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/02/28 12:00 a.m.•17 views

PT-2025-9117 · Unknown · Dario Health

Name of the Vulnerable Software and Affected Versions: Dario Health affected versions not specified Description: The issue concerns the exposure of development environment details in the Dario Health Internet-based server infrastructure, potentially leading to unsafe functionality. Recommendation...

6.9CVSS6.9AI score0.00309EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/28 12:00 a.m.•2 views

CVE-2025-20060: Exposure of Private Personal Information to an Unauthorized Actor

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

8.7CVSS5.8AI score0.00398EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/28 12:00 a.m.•10 views

Cisco Nexus 3000 9000 Series Switches Health Monitoring Diagnostics DoS (cisco-sa-n3kn9k-healthdos-eOqSWK4g)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker t...

7.4CVSS8.5AI score0.00321EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•19 views

Dario Health USB-C Blood Glucose Monitoring System 安全漏洞

Dario Health USB-C Blood Glucose Monitoring System is a portable blood glucose monitoring device from Dario Health, Israel. A security vulnerability exists in the Dario Health USB-C Blood Glucose Monitoring System that stems from a cookie policy observable through built-in browser tools, which in...

6.8CVSS5.8AI score0.0035EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•14 views

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic conditions. Dario Health has a security vulnerability that stems from a lack of encryption during cloud infrastructure transfers, which could lead to the manipulation or disclosure of...

7.5CVSS6.4AI score0.0009EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•16 views

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic conditions. Dario Health has a security vulnerability that stems from the exposure of development environment details that could lead to unsafe functionality...

6.9CVSS6.5AI score0.00309EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•16 views

Dario Health 跨站脚本漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic diseases. Dario Health suffers from a cross-site scripting vulnerability that stems from susceptibility to cross-site scripting tools that could lead to the disclosure of sensitive...

7.1CVSS5.6AI score0.00299EPSS
SaveExploits0References3
Rows per page
Query Builder