CVE-2020-8506

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

CVE-2020-8507

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...

CVE-2020-8506

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

CVE-2019-4613

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...

CVE-2019-4613

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...

Cross site request forgery (csrf)

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...

Design/Logic Flaw

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...

Code injection

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

CVE-2019-4613

CVE-2019-4613 concerns a Cross-Site Request Forgery (CSRF) vulnerability in IBM Planning Analytics 2.0. The IBM Planning Analytics Planning Analytics Workspace component is implicated, enabling an attacker to cause malicious, unauthorized actions transmitted from a trusted user’s session. The iss...

CVE-2019-4613

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...

CVE-2020-8506

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

CVE-2020-8506

The CVE-2020-8506 entry concerns the Global TV application (Android 2.3.2; iOS 4.7.5) that transmits analytics data unencrypted. The affected component is the application’s analytics/telemetry pathway, leading to a potential confidentiality impact as analytics could be observed in transit. Impact...

CVE-2020-8507

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...

CVE-2020-8507

CVE-2020-8507 affects Citytv Video: Android 4.08.0 and iOS 3.35. The published reports describe the issue as the app sending unencrypted analytics data. The connected records corroborate this behavior but do not detail the exact root cause, affected components, or versions beyond the listed app v...

Security Bulletin: IBM Planning Analytics Local is affected by a security vulnerability

Summary The Planning Analytics Workspace component of IBM Planning Analytics is impacted by a Cross-Site Request Forgery XSRF vulnerability . This vulnerability has been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 48. Vulnerability Details CVEID:...

The vulnerability of Intel’s Data Analytics Acceleration Library, related to permission processing errors, allows attackers to disclose protected information.

The vulnerability of the Intel Data Analytics Acceleration Library is related to permission processing errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the library’s security measures...

Security Bulletin: Vulnerability exists in Watson Explorer (CVE-2019-4441)

Summary Security vulnerability affects IBM Watson Explorer. Vulnerability Details CVEID: CVE-2019-4441 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM...

Ring Doorbell App for Android Caught Sharing User Data with Facebook, Data-Miners

UPDATE Amazon’s Ring Doorbell app for Android is a nexus for data-harvesting, according to an investigation by the Electronic Frontier Foundation EFF. Privacy advocates allege Ring goes so far as to silently deliver updates on Ring customer usage to Facebook, even if the Ring owner doesn’t have a...

CVE-2019-16015

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability is due to...

CVE-2019-16015

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability is due to...