CVE-2019-18285

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that ...

CVE-2019-18285

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that ...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that ...

CVE-2019-18285

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that ...

CVE-2019-18285

CVE-2019-18285 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). The vulnerability arises from unencrypted RMI communication between the client and the Application Server, allowing an attacker who has access to the Application Highway or the communicatio...

CVE-2019-2231

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

CVE-2019-2231

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

CVE-2019-2231

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

CVE-2019-2231

CVE-2019-2231 affects the Android blob handling in Blob::Blob (blob.cpp), where improper input validation can lead to an unencrypted master key and local information disclosure. The issue requires local access with system privileges to exploit, with no user interaction needed. Public sources conf...

Design/Logic Flaw

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

CVE-2019-12503

CVE-2019-12503 affects the Inateck BCST-60 wireless barcode scanner. The issue is unencrypted and unauthenticated data communication allowing keystroke injection, enabling an attacker to send arbitrary keystrokes to a victim’s computer and potentially install malware when the target system uses a...

CVE-2019-12503

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

CVE-2019-19463

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

Code injection

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

Design/Logic Flaw

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

CVE-2019-19463

The CVE-2019-19463 entry concerns the Anhui Huami Mi Fit Android app prior to version 4.0.11, where the update check is performed without encryption. This unencrypted update check constitutes the root cause, potentially enabling tampering with update responses and affecting integrity of updates. ...

CVE-2019-19463

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464

The CBC Gem mobile app is affected: Android versions prior to 9.24.1 and iOS versions prior to 9.26.0 expose Analytics data in unencrypted form. This enables potential leakage of user habits and sensitive information via analytics collection. Connected sources (CNVD-2020-00509, RH: CVE-2019-19464...