CERT – Page 44 – WindowsTechs.com

VU#326395: Nuuo NT-4040 firmware contains insecure default credentials

Posted on October 20, 2016 by CERT

Posted on October 20, 2016 by CERT

Posted on October 20, 2016 by CERT

Posted on October 17, 2016 by CERT

The ASUS RP-AC52 access point,firmware version 1.0.1.1s and possibly earlier,is vulnerable to cross-site request forgery and command injection. Continue reading VU#763843: ASUS RP-AC52 contains multiple vulnerabilities→

Posted on October 11, 2016 by CERT

MatrixSSL,version 3.8.5 and earlier,contains heap overflow,out-of-bounds read,and unallocated memory free operation vulnerabilities. Continue reading VU#396440: MatrixSSL contains multiple vulnerabilities→

Posted on October 4, 2016 by CERT

The Animas OneTouch Ping insulin pump contains multiple vulnerabilities that may allow an unauthenticated remote attacker to obtain patient treatment or device data,or execute commands on the device. The attacker cannot obtain personally identifiable information. Continue reading VU#884840: Animas OneTouch Ping insulin pump contains multiple vulnerabilities→

Posted on September 30, 2016 by CERT

U by BB&T for iOS,version 1.5.4 and earlier,fails to properly validate SSL certificates provided by HTTPS connections,which may enable an attacker to conduct man-in-the-middle(MITM)attacks. Continue reading VU#338624: U by BB&T iOS banking application fails to properly validate SSL certificates→

Posted on September 28, 2016 by CERT

The Aternity webserver,version 9 and prior,is reportedly vulnerable to cross-site scripting(XSS)on several web pages,and remote code execution via inclusion of untrusted functionality by default due to improper authentication before execution. Continue reading VU#706359: Aternity version 9 vulnerable to cross-site scripting and remote code execution→

Posted on September 13, 2016 by CERT

AVer Information EH6108H+hybrid DVR,version X9.03.24.00.07l and possibly earlier,reportedly contains multiple vulnerabilities,including undocumented privileged accounts,authentication bypass,and information exposure. Continue reading VU#667480: AVer Information EH6108H+ hybrid DVR contains multiple vulnerabilities→

Posted on September 7, 2016 by CERT

DEXIS is a dental x-ray imaging software that manages patient records. DEXIS Imaging Suite 10 contains several hard-coded credentials allowing administrative or root access to the patient database. Continue reading VU#282991: DEXIS Imaging Suite 10 contains hard-coded credentials→