24 matches found
EUVD-2022-37813
Malicious code in bioql PyPI...
EUVD-2022-37812
Malicious code in bioql PyPI...
CVE-2022-34909
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database...
CVE-2022-34908
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization ...
CVE-2022-34908
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization ...
CVE-2022-34909
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database...
CVE-2022-34910
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device...
Sql injection
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database...
Design/Logic Flaw
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device...
CVE-2022-34909
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database...
CVE-2022-34908
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization ...
CVE-2022-34910
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device...
CVE-2022-34909
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database...
CVE-2022-34910
The CVE-2022-34910 entry concerns the A4N (Aremis 4 Nomad) Android app 1.5.0, where user passwords are stored in cleartext in the local data store. This root cause enables any attacker with device access to retrieve other users’ passwords, describing a local, data-leak risk rather than a remote e...
CVE-2022-34909: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database...
PT-2023-13437
Name of the Vulnerable Software and Affected Versions A4N Aremis 4 Nomad version 1.5.0 Description An issue was discovered in the A4N application for Android, where it uses a local database to store data and accounts. However, the password is stored in cleartext, allowing an attacker to retrieve...
PT-2023-13436
Name of the Vulnerable Software and Affected Versions A4N Aremis 4 Nomad application version 1.5.0 Description The issue allows SQL Injection, enabling an attacker to bypass authentication and retrieve data stored in the database. This can lead to unauthorized access to sensitive information...
CVE-2022-34910: Cleartext Storage of Sensitive Information
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device...
PT-2023-13435
Name of the Vulnerable Software and Affected Versions A4N Aremis 4 Nomad application version 1.5.0 Description An issue was discovered in the A4N application, which possesses an authentication mechanism. However, some features do not require any token or cookie in a request, allowing an attacker ...
CVE-2022-34908
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization ...