U.S. Dept Of Defense: PII leakage due to scrceenshot of health records

Summary: Document shows a screenshot of a medical record for a soldier Description: One of the slides describes the CIV and PAD DSN along with some information relating to the soldier such as their name, the information appears to be old but could be still be an issue if they're in service Impact...

Popular Period Tracking Apps Share Your Sexual Health Data With Facebook

Hello Ladies, let's talk about periods, privacy, and Facebook. Are you using an app on your smartphone to keep tracks on your periods? Well, it's worrying, because it might be sharing your extremely sensitive information like menstrual cycle and sexual activities with Facebook. A new investigativ...

Popular Period Tracking Apps Share Your Sexual Health Data With Facebook

Hello Ladies, let's talk about periods, privacy, and Facebook. Are you using an app on your smartphone to keep tracks on your periods? Well, it's worrying, because it might be sharing your extremely sensitive information like menstrual cycle and sexual activities with Facebook. A new investigativ...

Secret Service Investigates Breach at U.S. Govt IT Contractor

The U.S. Secret Service is investigating a breach at a Virginia-based government technology contractor that saw access to several of its systems put up for sale in the cybercrime underground, KrebsOnSecurity has learned. The contractor claims the access being auctioned off was to old test systems...

Red Flag Laws Are Red Herrings of Gun Control

Opinion: There’s little data on the effectiveness of mental health reporting laws to prevent mass shootings...

Philips HDI 4000 Ultrasound

1. EXECUTIVE SUMMARY CVSS v3 3.0 ATTENTION: Public exploits are available/exploitable from within the same local subnet Vendor: Philips Equipment: HDI 4000 Ultrasound Systems Vulnerability: Use of Obsolete Function 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to...

Change Healthcare McKesson and Horizon Cardiology

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Change Healthcare Equipment: Change Healthcare Cardiology, Horizon Cardiology, McKesson Cardiology Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Security update for neovim (important)

openSUSE Security Update: Security update for neovim Announcement ID: openSUSE-SU-2019:1997-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update f...

keepalived security and bug fix update

1.3.5-16 - Rework previous miscscript/vrrpscript patch 1667292 1.3.5-15 - Rework previous checker comparison patch 1715308 1.3.5-14 - Make checker variables non global 1715308 1.3.5-13 - Fix comparison of checkers on reload 1715308 1.3.5-12 - Fix build errors 1678480 1.3.5-11 - Fix problems with...

Denial Of Service (DoS)

grpc-ts-health-check is vulnerable to denial of service DoS. The attack is possible as it does not protect its API endpoints, causing failure of service's health and thereby allowing Kubernetes to block traffic to services with a failing status...

Denial Of Service (DoS)

grpc-ts-health-check is vulnerable to denial of service DoS. The vulnerability exists as it exposes an API endpoint that may allow attackers to set the service's health status to failing...

Denial of Service

Overview Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing...

SUSE-SU-2019:2049-1 Security update for ceph

This update for ceph fixes the following issues: Security issues fixed: - CVE-2019-3821: civetweb: fix file descriptor leak bsc1125080 - CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth bsc1121567 Non-security issues fixed: - install grafana dashboards world...

Code Execution Vulnerability in ZZCMS2019

ZZCMS with product investment templates, you can quickly build product investment website. For example, the pharmaceutical investment industry, health care investment industry, cosmetics investment industry, agricultural investment industry, pregnancy and child investment industry, alcohol and fo...

Important: Red Hat Security Advisory: keepalived security update

An update for keepalived is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Arbitrary Password Reset Vulnerability in AIOT Structural Health Monitoring System

The AIOT structural health monitoring system is used to provide real-time dynamic insight into the latest structural condition during construction, enabling early warning of the overall safety of the structure and effective control of the project throughout its life. AIOT structural health...

SQL Injection Vulnerability in AIOT Structural Health Monitoring System

Shanghai Tonglei Civil Engineering Technology Co., Ltd. is a professional technical service company dedicated to providing information technology solutions in the building structure industry. AIOT structural health monitoring system has a SQL injection vulnerability, which can be exploited by...

Unauthorized Access Vulnerability in AIOT Structural Health Monitoring System

Shanghai Tonglei Civil Engineering Technology Co., Ltd. is a professional technical service company dedicated to providing information technology solutions in the building structure industry. An unauthorized access vulnerability exists in the AIOT structural health monitoring system, which can be...

Philips Holter 2010 Plus

1. EXECUTIVE SUMMARY CVSS v3 1.9 Vendor : Philips Equipment : Philips Holter 2010 Vulnerability : Use of Obsolete Function 2. RISK EVALUATION Successful exploitation of this vulnerability under certain conditions can lead to a product feature escalation. 3. TECHNICAL DETAILS 3.1 AFFECTED...

SQL Injection Vulnerability in Appointment Registration System of Nanjing Medical Health Information Technology Co.

Ltd. is a high-tech growing enterprise in China Nanjing Software Valley. A SQL injection vulnerability exists in the Appointment Registration System of Nanjing Medical Healthcare Information Technology Co...