186 matches found
Design/Logic Flaw
In Patient Information Center iX PICiX Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct...
CVE-2020-16216
CVE-2020-16216 affects Philips IntelliVue patient monitors (MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90) and IntelliVue X2/X3 prior to N. The issue is improper input validation in multiple components, leading to a denial-of-service via a system restart when processing input data...
CVE-2020-16224
CVE-2020-16224 affects Philips PICiX (Patient Information Center iX) in versions C.02 and C.03. The vulnerability stems from improper handling of a length field in a formatted message or structure, where the length value is inconsistent with the actual data length, causing the surveillance statio...
CVE-2020-16228
CVE-2020-16228 affects Philips PICiX (PIC iX) Versions C.02/C.03, PerformanceBridge Focal Point A.01, IntelliVue monitors MX100/MX400-MX850 and MP2-MP90, and IntelliVue X3 Versions N and prior. The issue is improper or missing certificate revocation checking, which may cause the device to trust a...
CVE-2020-16214
CVE-2020-16214 affects Philips PIC iX (PICiX) — versions B.02, C.02, C.03 — where user data saved to CSV files can include elements that are not properly neutralized, potentially enabling command interpretation when opened in spreadsheet software.Connected documents confirm the root cause: improp...
PT-2020-14819 · Philips · Patient Information Center Ix +1
Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions C.02 through C.03 PerformanceBridge Focal Point version A.01 Description: The product receives input that is expected to be well-formed but does not validate or incorrectly validates that the input...
PT-2020-14821 · Philips · Patient Information Center Ix +1
Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 PerformanceBridge Focal Point version A.01 Description: The software does not properly verify the identity of an actor, allowing the claim to be insufficiently proven...
PT-2020-14827 · Philips · Patient Information Center Ix +2
Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions C.02 and C.03 PerformanceBridge Focal Point version A.01 IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850 IntelliVue X3 versions N and prior Description: The software does not check or...
CVE-2020-17376
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...
USN-4472-1 postgresql-10, postgresql-12, postgresql-9.5 vulnerabilities
Noah Misch discovered that PostgreSQL incorrectly handled the searchpath setting when used with logical replication. A remote attacker could possibly use this issue to execute arbitrary SQL code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-14349 Andres Freund discover...
Focal Point - Moderately critical - Cross site scripting - SA-CONTRIB-2019-015
This module enables a privileged user to specify the important part of an image for the purposes of cropping. The module doesn't sufficiently sanitize certain form element attributes when the focal point widget is displayed on a form. This vulnerability is mitigated by the fact that an attacker...
CVE-2018-18444
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact...
PT-2018-16274 · Focalscope · Focalscope
Name of the Vulnerable Software and Affected Versions: FocalScope version v2416 Description: An exploitable unauthenticated XML external injection vulnerability was identified. A unauthenticated attacker could submit a specially crafted web request to FocalScope's server that could cause an XXE,...
IBM Rational Focal Point Weak Password Vulnerability
IBM Rational Focal Point is a suite of product and portfolio management software from IBM. The software is mainly used for project management, product management and product portfolio management, and provides prioritization, roadmap and other functions to assess the effectiveness of investment...
Design/Logic Flaw
IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704...
CVE-2014-0841
IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704...
CVE-2014-0841
The CVE affects IBM Rational Focal Point versions 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0, which use a weak password-hashing algorithm. Root cause: weak hash/cryptographic approach facilitates brute-force attacks. Impact: context-dependent attackers could obtain plaintext passwords. No remediation ...
CVE-2014-0841
IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704...
focal.com XSS vulnerability
Vulnerable URL: https://www.focal.com/en/search?s=%3C/script%3E%3E%3Cscript%3Eprompt1%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 116158 VIP website status:| No Coordinated Disclosure Timeline:...