PT-2019-7769

Name of the Vulnerable Software and Affected Versions WordPress safe-editor plugin versions prior to 1.2 Description The issue concerns a lack of authentication in the safe-editor plugin, leading to a potential XSS exploit. Recommendations For versions prior to 1.2, update the safe-editor plugin ...

PT-2019-13984

Name of the Vulnerable Software and Affected Versions Tyto Sahi Pro versions 6.x through 8.0.0 Description An issue in TestRunner Non distributed and distributed endpoints allows an attacker to execute arbitrary scripts on the remote Sahi Pro server due to the lack of an authentication mechanism...

PT-2019-14408

Name of the Vulnerable Software and Affected Versions nd-restaurant-reservations plugin versions prior to 1.5 Description The issue concerns a lack of authentication requirement for the nd rst import settings php function in the nd-restaurant-reservations plugin for WordPress. Recommendations For...

PT-2019-14409

Name of the Vulnerable Software and Affected Versions login-or-logout-menu-item plugin versions prior to 1.2.0 Description The issue concerns a lack of authentication requirement for lolmi save settings, potentially allowing unauthorized access. Recommendations For versions prior to 1.2.0, update...

CVE-2019-11019

Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...

CVE-2019-11019

CVE-2019-11019 describes an authentication flaw in the DDRT Dashcom Live platform’s case-exporting components, allowing remote access to all claim details via easily guessable exportpdf/all_claim_detail.php?claim_id= URLs. The linked records consistently state a lack of authentication as the issu...

PT-2019-3024

Name of the Vulnerable Software and Affected Versions TIA Administrator versions prior to V1.0 SP1 Upd1 Description The issue is related to a lack of authentication in the TIA Administrator software. This could allow an attacker to execute certain commands, potentially compromising the...

The vulnerability of the information protection system against unauthorized access: The Strife NT, due to the lack of authentication mechanisms in critical functions, allows attackers to gain access to the file system.

The vulnerability of the information protection system against unauthorized access in the Strife NT system is related to the absence of authentication mechanisms in critical functions. Exploiting this vulnerability allows a malicious actor, operating locally, to gain access to the file system by...

PT-2019-12105

Name of the Vulnerable Software and Affected Versions Medtronic MinMed 508 versions all Medtronic Minimed Paradigm Insulin Pumps versions all MiniMed Paradigm 511 pump versions all MiniMed Paradigm 512/712 pumps versions all MiniMed Paradigm 712E pump versions all MiniMed Paradigm 515/715 pumps...

Smart Lock Turns Out to be Not So Smart, or Secure

Researchers are warning a keyless smart door lock made by U-tec, called Ultraloq, could allow attackers to track down where the device is being used and easily pick the lock – either virtually or physically. Ultraloq is a Bluetooth fingerprint and touchscreen door lock sold for about $200. It...

SUPRA Smart TV Flaw Lets Attackers Hijack Screens With Any Video

I have said it before, and I will say it again — Smart devices are one of the dumbest technologies, so far, when it comes to protecting users' privacy and security. As more and more smart devices are being sold worldwide, consumers should be aware of security and privacy risks associated with the...

PT-2019-12097

Name of the Vulnerable Software and Affected Versions Fujifilm FCR Capsula X version CR-IR 357 Fujifilm FCR Carbon X version CR-IR 357 Fujifilm FCR XC-2 version CR-IR 357 Description The issue concerns the provision of insecure telnet services that lack authentication requirements. This could all...

PT-2019-3760

Name of the Vulnerable Software and Affected Versions ЕКRASMS-SP affected versions not specified Description The issue is related to the implementation of the interaction protocol between the "АРМ Релейщика" software and the "Сервер связи" software of the ЕКRASMS-SP complex. It is caused by the...

Medtronic's Implantable Defibrillators Vulnerable to Life-Threatening Hacks

The U.S. Department of Homeland Security Thursday issued an advisory warning people of severe vulnerabilities in over a dozen heart defibrillators that could allow attackers to fully hijack them remotely, potentially putting lives of millions of patients at risk. Cardioverter Defibrillator is a...

Authentication flaw

A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...

CVE-2018-10910

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable...

The vulnerability of the pnp-save.sh service on the TeNIX programmable logic controllers MFC1500 and MFC3000 allows a hacker to read data stored by other users on the device.

The vulnerability of the pnp-save.sh service in the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to remotely read data stored by other users on the devic...

Design/Logic Flaw

A vulnerability in the Graphite web interface of the Policy and Charging Rules Function PCRF of Cisco Policy Suite CPS could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The...

PT-2019-9692

Name of the Vulnerable Software and Affected Versions Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions Description The issue concerns the lack of authentication configuration on administrative telnet or web interfaces, which could enable various attack vectors. This...

PT-2018-2857

Name of the Vulnerable Software and Affected Versions Гранит-Навигатор-6.18 Description The issue is related to the lack of an authentication mechanism for users modifying the device's embedded software. This could allow an attacker to modify the embedded software, potentially leading to full...