Search results

The Internet Systems Consortium (ISC) has released security advisories that address vulnerabilities affecting multiple versions of ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition.

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Baxter has released details of multiple vulnerabilities affecting their ExactaMix automated compounding system. A remote unauthenticated attacker could exploit these vulnerabilities to obtain sensitive data, alter system configurations or resource, or cause a denial-of-service condition.

Drupal has released security updates to address vulnerabilities affecting Drupal 7, 8.8, 8.9, and 9.0. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

Security researchers have disclosed details of an invalid decapsulation vulnerability affecting the IP Encapsulation within IP (IETF RFC 2003) protocol. An unauthenticated remote attacker could exploit this vulnerability to arbitrarily reroute network traffic through an affected system.

Baxter has released details of a cleartext transmission vulnerability (CWE-319) affecting their Phoenix hemodialysis delivery system. they claim that an attacker with local network access could exploit this vulnerability to obtain patient treatment and prescription data.

BD (Becton, Dickinson and Co.) has released details of an uncontrolled resource consumption vulnerability (CWE-400) affecting their Alaris Point-of-Care Unit (PCU) infusion delivery system. A remote unauthenticated attacker could cause a denial-of-service (DoS) condition on an affected device.

Google has released Chrome version 83.0.4103.116 for Windows, Mac, and Linux. This version addresses a vulnerability that a remote attacker could exploit to cause a denial-of-service condition.

Philips Healthcare has released details of a sensitive information insertion vulnerability (CWE-532) affecting their IntelliBridge Enterprise (IBE) interoperability system. A remote authenticated attacker could exploit this to access an organisation's medical records or clinical information systems.

Philips Healthcare has released details of two buffer overflow vulnerabilities affecting a number of their PageWriter electrocardiogram (ECG) diagnostic products. They claim that an attacker with physical access to an affected device could modify system settings or access sensitive data.