PT-2019-9679

Name of the Vulnerable Software and Affected Versions Ascensia Contour NEXT ONE app for iOS versions prior to 2019-01-15 Description An issue was discovered that allows an attacker to proxy communications between the app and Ascensia backend servers due to a weak certificate-pinning implementatio...

PT-2019-9682

Name of the Vulnerable Software and Affected Versions Ascensia Contour NEXT ONE application for Android versions prior to 2019-01-15 Description The issue concerns a statically coded encryption key in the application. This key can be extracted, allowing an attacker to decipher communications...

[SECURITY] Fedora 28 Update: kst-2.0.8-20.fc28

Kst is a real-time data viewing and plotting tool with basic data analysis functionality. Kst contains many powerful built-in features and is expandable with plugins and extensions. Main features of kst include: Robust plotting of live "streaming" data. Powerful keyboard and mouse plot...

DEBIAN-CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

PT-2017-18260

Name of the Vulnerable Software and Affected Versions FreeType 2 versions prior to 2017-03-26 Description The issue is caused by a heap-based buffer overflow related to the t1 builder close contour function in psaux/psobjs.c, resulting in an out-of-bounds write. Recommendations For versions prior...

alya.contourgroup.com XSS vulnerability

Vulnerable URL: http://alya.contourgroup.com/edocs/?brand="/%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...