CVE-2018-14786

BD Alaris Plus syringe pumps (GS/GH/CC/TIVA) versions 2.3.6 and earlier are affected by an improper authentication vulnerability (CWE-287) where the device does not authenticate functions requiring a provable user identity, potentially allowing a remote attacker to gain unauthorized access and im...

CVE-2018-5539

Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRF protections, the BIG-IP ASM bd process may restart and produce a core file...

CVE-2018-5541

When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process...

CVE-2018-5541

When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process...

Security Bulletin: IBM X Series hardware IMMv1, IMMv2 remote management ports as used by IBM QRadar SIEM appliances are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224)

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients an...

bd-auto.com XSS vulnerability

Open Bug Bounty ID: OBB-632838 Description| Value ---|--- Affected Website:| bd-auto.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10595

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in loss or corruption of data...

CVE-2018-10595

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in loss or corruption of data...

CVE-2018-10595

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in loss or corruption of data...

BD Kiestra and InoquIA Systems (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable from adjacent network Vendor : Becton, Dickinson and Company BD Equipment : BD Kiestra and InoqulA systems Vulnerabilities : Product UI does not Warn User of Unsafe Actions 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

BD Pyxis

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION : Public exploits are available. Vendor : Becton, Dickinson and Company BD Equipment : Certain BD Pyxis Products Vulnerability : Reusing a Nonce 2. RISK EVALUATION Successful exploitation of this vulnerability could allow data traffic manipulation,...

CVE-2018-7899

CVE-2018-7899 corresponds to a double-free vulnerability in the Mali driver of Huawei Berkeley-AL20/ Berkeley-BD smartphones (Berkeley-AL20 8.0.0.x and Berkeley-BD 1.0.x ranges). The issue is triggered via the exception handling path and can be exploited by convincing a user to install a maliciou...

CVE-2018-7899

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

Huawei Berkeley Mali Driver Denial of Service Vulnerability

Berkeley-AL20, Berkeley-BD, etc. are smartphone products of China's Huawei Huawei. A denial-of-service vulnerability exists in the Mali driver of the Huawei Berkeley-AL20, Berkeley-BD, which can be exploited by an attacker to cause a system reboot by tricking the user into installing a malicious...

bd-inmobiliaria.com XSS vulnerability

Open Bug Bounty ID: OBB-587151 Description| Value ---|--- Affected Website:| bd-inmobiliaria.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bd-film.co XSS vulnerability

Open Bug Bounty ID: OBB-583172 Description| Value ---|--- Affected Website:| bd-film.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-6154

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

CVE-2017-6154

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

CVE-2017-6154

CVE-2017-6154 affects F5 BIG-IP ASM; specifically the bd process may core dump memory when processing undisclosed data on systems with 48+ CPU cores. Vulnerable: BIG-IP ASM (bd) across versions 13.0.0, 12.1.0–12.1.3, and 11.6.1–11.6.2. Impact: core file generation, traffic processing interruption...

CVE-2017-6154

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...