Skip to content
OpenAdvisories

Archive

10 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /10 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2018-10626

    Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity

    Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload…

    Medtronic 24950 MyCareLink Monitor 24952 MyCareLink Monitor
  • Medium 5.2
    CVE-2018-10622

    Medtronic MyCareLink Patient Monitor Network Credential Weakness

    Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.

    Medtronic 24952 MyCareLink Monitor 24950 MyCareLink Monitor
  • Medium 6.1
    CVE-2018-13390

    Cloudtoken Insufficiently Protects Credentials

    Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.

    Atlassian cloudtoken cloudtoken PyPI