CVE-2019-2231

CVE-2019-2231 affects the Android blob handling in Blob::Blob (blob.cpp), where improper input validation can lead to an unencrypted master key and local information disclosure. The issue requires local access with system privileges to exploit, with no user interaction needed. Public sources conf...

Design/Logic Flaw

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

CVE-2019-12503

CVE-2019-12503 affects the Inateck BCST-60 wireless barcode scanner. The issue is unencrypted and unauthenticated data communication allowing keystroke injection, enabling an attacker to send arbitrary keystrokes to a victim’s computer and potentially install malware when the target system uses a...

CVE-2019-12503

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19463

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

Design/Logic Flaw

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

Code injection

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19463

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

CVE-2019-19463

The CVE-2019-19463 entry concerns the Anhui Huami Mi Fit Android app prior to version 4.0.11, where the update check is performed without encryption. This unencrypted update check constitutes the root cause, potentially enabling tampering with update responses and affecting integrity of updates. ...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464

The CBC Gem mobile app is affected: Android versions prior to 9.24.1 and iOS versions prior to 9.26.0 expose Analytics data in unencrypted form. This enables potential leakage of user habits and sensitive information via analytics collection. Connected sources (CNVD-2020-00509, RH: CVE-2019-19464...

CVE-2019-19463: Cleartext Transmission of Sensitive Information

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

PT-2019-12831

Name of the Vulnerable Software and Affected Versions Inateck BCST-60 affected versions not specified Description The Inateck BCST-60 wireless barcode scanner is prone to keystroke injection attacks due to unencrypted and unauthenticated data communication. This allows an attacker to send arbitra...

PT-2019-15847

Name of the Vulnerable Software and Affected Versions CBC Gem versions prior to 9.24.1 for Android CBC Gem versions prior to 9.26.0 for iOS Description The issue concerns unencrypted analytics in the CBC Gem application. Recommendations For Android versions prior to 9.24.1, update to version 9.24...

PT-2019-15846

Name of the Vulnerable Software and Affected Versions Mi Fit application versions prior to 4.0.11 Description The issue concerns an unencrypted update check in the application. Recommendations For versions prior to 4.0.11, update to version 4.0.11 or later to resolve the issue...

CVE-2019-19464: Missing Encryption of Sensitive Data

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2020-17205)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Spira Importer Plugin is used in one of the SpiraPla...

TrickBot Evolves to Go After SSH Keys

The TrickBot info-stealing malware has updated its password grabber to target data from OpenSSH and OpenVPN applications. OpenSSH is a connectivity tool for remote login with the SSH protocol; it encrypts all traffic to eliminate eavesdropping. OpenVPN meanwhile is used for secure private...

Unspecified Vulnerability in CloudBees Jenkins QMetry for JIRA-Test Management Plugin (CNVD-2019-42825)

CloudBees Jenkins Hudson Labs is a set of U.S. CloudBees company based on Java development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . QMetry for JIRA-Test Management Plugin is used in one of...