Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2020-68354)

The Huawei P30 Pro, among others, is a smartphone from the Chinese company Huawei Huawei. A number of Huawei products suffer from an information disclosure vulnerability that stems from the failure to adequately verify the identity of a smart wearable device in a particular scenario, where an...

CVE-2020-16198

When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct...

Code injection

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. When an attacker claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...

CVE-2020-16198 Philips Clinical Collaboration Platform Protection Mechanism Failure

When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct...

CVE-2020-16222

In Patient Information Center iX PICiX Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...

CVE-2020-16222

In Patient Information Center iX PICiX Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...

Design/Logic Flaw

In Patient Information Center iX PICiX Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...

CVE-2020-16222

CVE-2020-16222 relates to Philips PICiX and related components (PICiX B.02/C.02/C.03 and PerformanceBridge Focal Point A.01) where an actor claiming a given identity is not properly proven, enabling improper authentication. Connected sources confirm this as a multi‑vulnerability family in PICiX, ...

PT-2020-14821 · Philips · Patient Information Center Ix +1

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 PerformanceBridge Focal Point version A.01 Description: The software does not properly verify the identity of an actor, allowing the claim to be insufficiently proven...

CVE-2020-16239

When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...

CVE-2020-16239 Philips SureSigns VS4 Improper Authentication

When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...

PT-2020-14832 · Philips · Philips Suresigns Vs4

Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The software fails to properly verify the identity of an actor, allowing the actor to claim a given identity without sufficient proof that the claim is correct. Recommendations: F...

Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass (cisco-asa-kerberos-bypass-96Gghe2sS)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability in the Kerberos authentication feature due to insufficient identity verification of the Kerberos key distribution center KDC when a successful authentication response is received...

Authentication flaw

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center KDC and bypass authentication on an affected device that is configured to perform Kerberos...

The passwordless present: Will biometrics replace passwords forever?

When it comes to securing your sensitive, personally identifiable information against criminals who can engineer countless ways to snatch it from under your nose, experts have long recommended the use of strong, complex passwords. Using long passphrases with combinations of numbers, letters, and...

Deepfakes and AI: Fighting Cybersecurity Fire with Fire

Today, the most successful and damaging cyberattacks are executed by highly professional criminal networks rather than “lone-wolf” hackers. These criminal organizations have also become highly adept at leveraging artificial intelligence AI and machine learning ML tools, making it extremely hard f...

Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability (CNVD-2020-22000)

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the app locking feature failing to perform...

U.S. Govt. Makes it Harder to Get .Gov Domains

The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity published research suggesting it was relatively easy for just about anyone to get...

USN-4276-1 Yubico PIV Tool vulnerabilities

It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV Manager...

CVE-2018-19833

The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...