PT-2022-8855

Name of the Vulnerable Software and Affected Versions Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 Description The issue is related to Missing Authentication. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2022-8853

Name of the Vulnerable Software and Affected Versions Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 Description The issue concerns a Replay Attack to BP Monitoring. There is no information provided about the estimated number of potentially affected devices worldwide or detai...

CVE-2020-27374: Authentication Bypass by Capture-replay

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring...

PT-2022-8852

Name of the Vulnerable Software and Affected Versions Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 Description The issue concerns a vulnerability where plain text commands can be sent over Bluetooth Low Energy BLE. This could potentially allow unauthorized access or control...

Wyse Management Suite File Upload Vulnerability

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell USA. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.A security vulnerability exists in Wyse Management Suite, which stems from unrestricted...

Wyze Cam Authentication Bypass Vulnerability

Wyze Labs Wyze Cam is a series of cameras from Wyze Labs, U.S.A. The Wyze Cam has an authentication bypass vulnerability that could be exploited by an attacker to bypass a login and take control of the device...

IBM Spectrum Protect Operations Center跨站请求伪造漏洞

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control of the IBM Spectrum Protect environment. IBM Spectrum Protect Operations Center contains a security vulnerability that could be exploited by an attacker to execute malicious and unauthorized actions fro...

Zabbix Frontend Cross-Site Scripting Vulnerability (CNVD-2022-22695)

A cross-site scripting vulnerability in Zabbix Frontend, a monitoring software front-end tool from Zabbix USA, stems from a lack of data validation filtering of user-supplied data and output in the service configuration window, which could be exploited by an authenticated attacker to create a lin...

Microsoft Word Security Bypass Vulnerability

Microsoft Word is a word processing software in the Office suite from Microsoft Corporation USA. a security bypass vulnerability exists in Microsoft Word. An attacker could exploit the vulnerability to bypass security features, thereby affecting the integrity...

Microsoft Raw Image Extension Remote Code Execution Vulnerability (CNVD-2023-02188)

Microsoft Raw Image Extension is a software for manipulating Raw format files from Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Raw Image Extension. An attacker could exploit the vulnerability to execute arbitrary code on the system...

ZOHO ManageEngine Desktop Central Information Disclosure Vulnerability (CNVD-2022-29876)

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO USA. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. The vulnerability...

Hashicorp Terraform Enterprise Log Information Disclosure Vulnerability

Hashicorp Terraform, an open source tool for pre-provisioning and managing cloud infrastructures from HashiCorp USA, has a log information disclosure vulnerability that stems from HashiCorp Terraform Enterprise inserting sensitive information into log files. An attacker could exploit this...

Wyse Device Agent Licensing Issue Vulnerability

DELL Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell USA. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.An authorization issue vulnerability exists in Wyse due to an error in processing...

IBM Maximo Asset Management Authorization Issues Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. An authorizatio...

Wyse Device Agent Information Disclosure Vulnerability (CNVD-2022-42741)

Wyse Device Agent is a unified agent for all thin client management solutions from Dell, U.S.A. Wyse Device Agent is vulnerable to an information disclosure vulnerability due to excessive data exported by the application. An attacker could exploit the vulnerability to access potentially sensitive...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-11504)

Google TensorFlow is an end-to-end open source platform for machine learning from Google USA. Google Tensorflow suffers from an input validation error vulnerability, which can be exploited by an attacker to cause a CHECK failure denial-of-service based assertion failure and result in a denial of...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-15814)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-16158)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-16159)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...

Microsoft Windows Runtime Remote Code Execution Vulnerability

Microsoft Windows Runtime .net framework is a necessary feature support library for the Windows operating system from Microsoft USA.Microsoft Windows Runtime has a remote code execution vulnerability for which no details of the vulnerability are currently available...