386 matches found
CVE-2020-16222
In Patient Information Center iX PICiX Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...
CVE-2020-16222
In Patient Information Center iX PICiX Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...
Design/Logic Flaw
In Patient Information Center iX PICiX Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...
CVE-2020-16222
CVE-2020-16222 relates to Philips PICiX and related components (PICiX B.02/C.02/C.03 and PerformanceBridge Focal Point A.01) where an actor claiming a given identity is not properly proven, enabling improper authentication. Connected sources confirm this as a multi‑vulnerability family in PICiX, ...
PT-2020-14821 · Philips · Patient Information Center Ix +1
Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 PerformanceBridge Focal Point version A.01 Description: The software does not properly verify the identity of an actor, allowing the claim to be insufficiently proven...
CVE-2020-16239
When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...
CVE-2020-16239 Philips SureSigns VS4 Improper Authentication
When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...
PT-2020-14832 · Philips · Philips Suresigns Vs4
Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The software fails to properly verify the identity of an actor, allowing the actor to claim a given identity without sufficient proof that the claim is correct. Recommendations: F...
Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass (cisco-asa-kerberos-bypass-96Gghe2sS)
According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability in the Kerberos authentication feature due to insufficient identity verification of the Kerberos key distribution center KDC when a successful authentication response is received...
Authentication flaw
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center KDC and bypass authentication on an affected device that is configured to perform Kerberos...
The passwordless present: Will biometrics replace passwords forever?
When it comes to securing your sensitive, personally identifiable information against criminals who can engineer countless ways to snatch it from under your nose, experts have long recommended the use of strong, complex passwords. Using long passphrases with combinations of numbers, letters, and...
Deepfakes and AI: Fighting Cybersecurity Fire with Fire
Today, the most successful and damaging cyberattacks are executed by highly professional criminal networks rather than “lone-wolf” hackers. These criminal organizations have also become highly adept at leveraging artificial intelligence AI and machine learning ML tools, making it extremely hard f...
Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability (CNVD-2020-22000)
The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the app locking feature failing to perform...
U.S. Govt. Makes it Harder to Get .Gov Domains
The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity published research suggesting it was relatively easy for just about anyone to get...
USN-4276-1 Yubico PIV Tool vulnerabilities
It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV Manager...
CVE-2018-19833
The CVE-2018-19833 entry concerns the DDQ smart contract (ERC20) where the function that sets/owners can be invoked by anyone because there is no caller identity check. Connected CNVD records (e.g., CNVD-2020-03511 describing DDQ override vulnerability) reiterate that the DDQ implementation’s own...
CVE-2018-19833
The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...
CVE-2018-19830
Summary: CVE-2018-19830 affects the BAFC smart contract on Ethereum (ERC20 token). The UBSexToken() function is publicly callable and does not verify the caller’s identity, enabling an attacker to change the contract owner. Connected CNVD entries confirm an overreach/owner modification vulnerabil...
intranet.famnit.upr.si Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1053966 Security Researcher RootByte Helped patch 879 vulnerabilities Received 4 Coordinated Disclosure badges Received 4 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting intranet.famnit.upr.si...