PT-2025-4301 · Aat · Aat

Name of the Vulnerable Software and Affected Versions: AAT Another Activity Tracker versions prior to 1.26 Description: AAT is a GPS-tracking application for tracking sportive activities, with an emphasis on cycling. The issue allows for data exfiltration from malicious apps installed on the same...

PT-2022-10495 · Cevas · Cevas

Name of the Vulnerable Software and Affected Versions: CEVAS versions prior to 1.01.46 Description: The issue concerns insufficient validation of user-controllable input, which could allow a user to bypass authentication and retrieve data using specially crafted SQL queries. Recommendations: For...

PT-2021-17481 · Ypsomed · Ypsomed Mylife App +1

Name of the Vulnerable Software and Affected Versions: Ypsomed mylife Cloud versions prior to 1.7.2 Ypsomed mylife App versions prior to 1.7.5 Description: The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which...