Weekly Update: a new vulnerability is published on the National Vulnerability Database (52 items)

New vulnerabilities from the NVD: CVE-2020-7851 Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection. Published at: April 19, 2021 at 04:15PM View on website April 19, 2021 at 05:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-28141 The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page. Published at: April 19, 2021 at 07:15PM View on website April 19, 2021 at 09:37PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27241 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Published at: April 20, 2021 at 12:15AM View on website April 20, 2021 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27240 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability. Published at: April 20, 2021 at 12:15AM View on website April 20, 2021 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20453 IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 08:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20023 SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 08:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-7856 A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation. Published at: April 20, 2021 at 04:15PM View on website April 20, 2021 at 08:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20453 IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20023 SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-7856 A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation. Published at: April 20, 2021 at 04:15PM View on website April 20, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20501 IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056. Published at: April 21, 2021 at 03:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20454 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196649. Published at: April 21, 2021 at 03:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-1079 NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. Published at: April 20, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-7857 A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: Tobesoft XPlatform versions prior to 9.2.2.280. Published at: April 20, 2021 at 11:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35982 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hinter_track_finalize() in media_tools/isom_hinter.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35981 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters() in isomedia/isom_store.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35980 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gf_isom_box_del() in isomedia/box_funcs.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35979 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gp_rtp_builder_do_avc() in ietf/rtp_pck_mpeg4.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35314 An OS command injection vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer. Published at: April 20, 2021 at 11:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35313 A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installer. Published at: April 20, 2021 at 11:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-26197 Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication provider. Published at: April 20, 2021 at 08:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-25864 HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14. Published at: April 20, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-14105 The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15. Published at: April 20, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-28973 The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system. Published at: April 21, 2021 at 10:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23932 An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in filedump.c. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23931 An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23930 An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23928 An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23922 An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23921 An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23915 An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23914 An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23912 An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23907 An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer overflow. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-36324 Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type. Published at: April 21, 2021 at 11:15PM View on website April 22, 2021 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27569 Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system. Published at: April 22, 2021 at 01:15AM View on website April 22, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27568 Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security. Published at: April 22, 2021 at 01:15AM View on website April 22, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27738 A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions < V2017.02.3), Nucleus Source Code (versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), VSTAR (versions including affected DNS modules). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a read access past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27737 A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions < V2017.02.3), Nucleus Source Code (versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), VSTAR (versions including affected DNS modules). The DNS response parsing functionality does not properly validate various length and counts of the records. The parsing of malformed responses could result in a read past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition or leak the memory past the allocated structure. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27736 A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions < V2017.02.3), Nucleus Source Code (versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), VSTAR (versions including affected DNS modules). The DNS domain name label parsing functionality does not properly validate the null-terminated name in DNS-responses. The parsing of malformed responses could result in a read past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition or leak the read memory. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27009 A vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus RTOS (versions including affected DNS modules), Nucleus Source Code (versions including affected DNS modules), VSTAR (versions including affected DNS modules). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-26997 A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11919) Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-25244 A vulnerability has been identified in LOGO! Soft Comfort (All versions). The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-25243 A vulnerability has been identified in LOGO! Soft Comfort (All versions). A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chained with other vulnerabilities this vulnerability could ultimately lead to a system takeover by an attacker. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15795 A vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus RTOS (versions including affected DNS modules), Nucleus Source Code (versions including affected DNS modules), VSTAR (versions including affected DNS modules). The DNS domain name label parsing functionality does not properly validate the names in DNS-responses. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17564 Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component. Published at: April 23, 2021 at 01:15AM View on website April 23, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17563 Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id=". Published at: April 23, 2021 at 01:15AM View on website April 23, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25028 Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows attacker to inject malicious JavaScript via unspecified vector Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25027 Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-25007 Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message. Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2017-20003 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17542 Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin/#/c/workflow" component. Published at: April 24, 2021 at 12:15AM View on website April 24, 2021 at 01:36AM via National Vulnerability Database

Weekly Update: New diabetes clinical trial (20 items)

New diabetes clinical trial: Assess the Impact of Insulclock on Glycemic Variability and Treatment Compliance in Uncontrolled DM1 Patients Published on: April 19, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 1 Interventions:   Device: Use of Insulclock system, both Insulclock device and Insulclock 360 app.;   Device: Use of Insulclock system, both Insulclock device and Insulclock app on masked mode. Sponsors:   Hospital General de Segovia;   Insulcloud S.L. Recruiting https://clinicaltrials.gov/ct2/show/NCT04847778?term=diabetes&sfpd_d=14 April 19, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Efficacy and Safety of Premixed Insulin Treatment in Patients With Type 2 Diabetes Mellitus Published on: April 19, 2021 at 07:00PM Condition:   Type 2 Diabetes Intervention:   Device: flash glucose mornitoring Sponsors:   Nanjing First Hospital, Nanjing Medical University;   Wuxi Hospital of Traditional Chinese Medicine;   Wuxi People's Hospital Affiliated to Nanjing Medical University;   Huai'an Second People's Hospital and the Affiliated Huai'an Hospital of Xuzhou Medical University;   The Affiliated Suqian First People's Hospital of Nanjing Medical University Recruiting https://clinicaltrials.gov/ct2/show/NCT04847219?term=diabetes&sfpd_d=14 April 19, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: A Research Study to Compare a New Weekly Insulin, Insulin Icodec, and an Available Daily Insulin, Insulin Degludec, Both in Combination With Mealtime Insulin in People With Type 1 Diabetes (ONWARDS 6) Published on: April 19, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 1 Interventions:   Drug: insulin icodec;   Drug: insulin degludec;   Drug: insulin aspart Sponsor:   Novo Nordisk A/S Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04848480?term=diabetes&sfpd_d=14 April 19, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Dark Chocolate and Glucose Levels in Diabetes Published on: April 19, 2021 at 07:00PM Conditions:   Type 2 Diabetes;   Type 1 Diabetes Intervention:   Dietary Supplement: Dark chocolate Sponsor:   University of British Columbia Recruiting https://clinicaltrials.gov/ct2/show/NCT04847999?term=diabetes&sfpd_d=14 April 19, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Novel Classification of Adult-onset Diabetes and Its Association With Common Microvascular Complications in Upper Egypt Published on: April 19, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Intervention:   Diagnostic Test: HbA1C, other investigations Sponsor:   Sohag University Active, not recruiting https://clinicaltrials.gov/ct2/show/NCT04847414?term=diabetes&sfpd_d=14 April 19, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Investigating Plasma Biomarker Molecules Associated With the Progression of Prediabetes to Overt Type 2 Diabetes Published on: April 20, 2021 at 07:00PM Conditions:   Type2 Diabetes Mellitus;   Pre Diabetes Intervention:   Sponsor:   University of Roehampton Recruiting https://clinicaltrials.gov/ct2/show/NCT04851223?term=diabetes&sfpd_d=14 April 20, 2021 at 04:24PM via ClinicalTrials.gov New diabetes clinical trial: Fast Advanced Closed-Loop Therapy Published on: April 21, 2021 at 07:00PM Condition:   Type 1 Diabetes Interventions:   Drug: Fiasp;   Drug: Novorapid Sponsors:   University of Ljubljana, Faculty of Medicine;   Medical University of Graz Department of Pediatrics and Adolescent Medicine, Graz, Austria;   UMC Ljubljana University Children's Hospital Ljubljana Recruiting https://clinicaltrials.gov/ct2/show/NCT04853030?term=diabetes&sfpd_d=14 April 21, 2021 at 01:24PM via ClinicalTrials.gov New diabetes clinical trial: Intermittent Fasting on the Incidence of Gestational Diabetes Mellitus Obese Pregnant Women in 3rd Trimester Published on: April 21, 2021 at 07:00PM Conditions:   Intermittent Fasting;   Gestational Diabetes;   Obesity Intervention:   Dietary Supplement: intermittent fasting diet Sponsor:   Ain Shams University Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04853537?term=diabetes&sfpd_d=14 April 21, 2021 at 01:24PM via ClinicalTrials.gov New diabetes clinical trial: Skin Manifestations Associated With Adhesives in Diabetes Technology Tools Published on: April 21, 2021 at 07:00PM Condition:   Diabetes Intervention:   Other: Cutadiab questionnaire Sponsor:   Assistance Publique - Hôpitaux de Paris Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04853810?term=diabetes&sfpd_d=14 April 21, 2021 at 01:24PM via ClinicalTrials.gov New diabetes clinical trial: Ketone Esters in T2DM Published on: April 22, 2021 at 07:00PM Condition:   Type 2 Diabetes Interventions:   Dietary Supplement: Ketone monoesters;   Dietary Supplement: Placebo Sponsors:   University of Portsmouth;   Portsmouth Hospitals NHS Trust Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04854330?term=diabetes&sfpd_d=14 April 22, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: Randomized Phase 3 Study of Metformin DR in Patients With Type 2 Diabetes Published on: April 22, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Interventions:   Drug: Metformin DR;   Drug: Metformin IR;   Drug: Metformin DR Placebo;   Drug: Metforin IR placebo Sponsor:   Anji Pharma Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04854512?term=diabetes&sfpd_d=14 April 22, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: Semaglutide as an Adjunct to Dieting in the Treatment of Type 2 Diabetes Published on: April 22, 2021 at 07:00PM Condition:   Type2 Diabetes Interventions:   Drug: Semaglutide, 1.34 mg/mL;   Drug: Placebo Sponsors:   Kirsi Pietiläinen;   University of Helsinki;   Turku University Hospital Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04854083?term=diabetes&sfpd_d=14 April 22, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: A Study of TG103 Injection in Overweight/Obese Subjects Without Diabetes Published on: April 22, 2021 at 07:00PM Condition:   Diabetes Interventions:   Drug: TG103 injection;   Drug: Placebo Sponsor:   CSPC Baike (Shandong) Biopharmaceutical Co., Ltd. Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04855292?term=diabetes&sfpd_d=14 April 22, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: The Effect of Personal Protective Aids on Hypertension and Diabetes in People Exposed to High Levels of Air Pollution Published on: April 22, 2021 at 07:00PM Conditions:   Pollution; Exposure;   HTN;   Diabetes Mellitus Intervention:   Device: N95 Mask/Indoor air purifier: Including sham Sponsors:   Medstar Health Research Institute;   Indian Institute of Technology Kanpur Recruiting https://clinicaltrials.gov/ct2/show/NCT04854187?term=diabetes&sfpd_d=14 April 22, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: Assessing Diabetes Mellitus on Cytokine Analysis and Macular Edema Following FLACS Published on: April 23, 2021 at 07:00PM Conditions:   Cystoid Macular Edema;   Diabetes Mellitus;   Cataract Intervention:   Procedure: Cataract surgery Sponsor:   Uptown Eye Specialists Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04856670?term=diabetes&sfpd_d=14 April 23, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: Antimicrobial Photodynamic Therapy in Chronic Periodontitis and Diabetes Mellitus Published on: April 23, 2021 at 07:00PM Conditions:   Type 2 Diabetes Mellitus;   Prediabetic State;   Chronic Periodontitis Intervention:   Drug: Indocyanine green Sponsor:   King Saud University Completed https://clinicaltrials.gov/ct2/show/NCT04857346?term=diabetes&sfpd_d=14 April 23, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: A Study to Test How a New Long-acting Insulin (Insulin Icodec) Works in the Body of People From China With Type 2 Diabetes Published on: April 23, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Intervention:   Drug: insulin degludec Sponsor:   Novo Nordisk A/S Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04857398?term=diabetes&sfpd_d=14 April 23, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: Daily Versus Every Other Day Glucose Monitoring in Gestational Diabetes Mellitus Published on: April 23, 2021 at 07:00PM Condition:   Gestational Diabetes Intervention:   Other: Glucose Monitoring Sponsor:   Icahn School of Medicine at Mount Sinai Recruiting https://clinicaltrials.gov/ct2/show/NCT04857073?term=diabetes&sfpd_d=14 April 23, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: Pre-meal Consumption of Whey in Gestational Diabetes Mellitus From Diagnosis to Delivery Published on: April 23, 2021 at 07:00PM Condition:   Gestational Diabetes Interventions:   Dietary Supplement: Whey;   Dietary Supplement: Placebo Sponsor:   University of Aarhus Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04856800?term=diabetes&sfpd_d=14 April 23, 2021 at 11:24PM via ClinicalTrials.gov New diabetes clinical trial: Peers LEAD Plus Healthy Living With Diabetes (HLWD) Published on: April 23, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Intervention:   Behavioral: Peers LEAD plus HLWD Sponsor:   University of Wisconsin, Madison Recruiting https://clinicaltrials.gov/ct2/show/NCT04857411?term=diabetes&sfpd_d=14 April 23, 2021 at 11:24PM via ClinicalTrials.gov

Weekly Digest: New diabetes clinical trial (1 item)

New diabetes clinical trial: A Study to Evaluate Continuous Glucose Monitor in Hospitalized, Post-operative Patients With Diabetes Mellitus Published on: April 15, 2021 at 07:00PM Condition:   Diabetes Mellitus Intervention:   Device: Continuous Glucose Monitor (CGM) Sponsor:   Mayo Clinic Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04845685?term=diabetes&sfpd_d=14 April 15, 2021 at 03:24PM via ClinicalTrials.gov

Weekly Update: a new vulnerability is published on the National Vulnerability Database (8 items)

New vulnerabilities from the NVD: CVE-2020-28593 A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. Published at: April 15, 2021 at 05:15PM View on website April 15, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-28592 A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to remote code execution. An attacker can send a malicious packet to trigger this vulnerability. Published at: April 15, 2021 at 05:15PM View on website April 15, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27239 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability. Published at: April 15, 2021 at 05:15PM View on website April 15, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27238 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Published at: April 15, 2021 at 05:15PM View on website April 15, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27237 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Published at: April 15, 2021 at 05:15PM View on website April 15, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-28898 In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation. Published at: April 15, 2021 at 10:15PM View on website April 15, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-19942 A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 build 20210202 (and later) QTS 4.5.1.1456 build 20201015 (and later) QTS 4.3.6.1446 build 20200929 (and later) QTS 4.3.4.1463 build 20201006 (and later) QTS 4.3.3.1432 build 20201006 (and later) QTS 4.2.6 build 20210327 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.4.1601 build 20210309 (and later) QuTScloud c4.5.3.1454 build 20201013 (and later) Published at: April 16, 2021 at 04:15AM View on website April 16, 2021 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-2509 A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later QTS 4.5.1.1495 Build 20201123 and later QTS 4.3.6.1620 Build 20210322 and later QTS 4.3.4.1632 Build 20210324 and later QTS 4.3.3.1624 Build 20210416 and later QTS 4.2.6 Build 20210327 and later QuTS hero h4.5.1.1491 build 20201119 and later Published at: April 17, 2021 at 07:15AM View on website April 17, 2021 at 08:36AM via National Vulnerability Database

Weekly Digest: New diabetes clinical trial (14 items)

New diabetes clinical trial: A Study of LY3437943 in Japanese Participants With Type 2 Diabetes Mellitus (T2DM) Published on: March 30, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Interventions:   Drug: LY3437943;   Drug: Placebo Sponsor:   Eli Lilly and Company Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04823208?term=diabetes&sfpd_d=14 March 30, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Evaluation of Medtronic DUO Extended Set Published on: March 30, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 1 Intervention:   Device: Experimental prospective single arm evaluating the Medtronic Duo Extended Set Sponsors:   Atlanta Diabetes Associates;   Medtronic Recruiting https://clinicaltrials.gov/ct2/show/NCT04823312?term=diabetes&sfpd_d=14 March 30, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: The Impact of the COVID-19 Pandemic on Diabetes Management Published on: March 30, 2021 at 07:00PM Conditions:   Type 2 Diabetes;   Type 1 Diabetes Mellitus Intervention:   Other: No intervention Sponsor:   Universitätsklinikum Hamburg-Eppendorf Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04821921?term=diabetes&sfpd_d=14 March 30, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Evaluation of a Telehealth DPP With Patients at the University of Mississippi Medical Center Published on: March 30, 2021 at 07:00PM Conditions:   PreDiabetes;   Prediabetic State Intervention:   Behavioral: Diabetes Prevention Program (DPP) Sponsors:   University of Mississippi Medical Center;   American Medical Association;   Mississippi State Department of Health Recruiting https://clinicaltrials.gov/ct2/show/NCT04822480?term=diabetes&sfpd_d=14 March 30, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: A Study to Evaluate the Effect of IMB-1018972 on Cardiac Energetics in Patients With Type 2 Diabetes (IMPROVE-DiCE) Published on: April 01, 2021 at 07:00PM Conditions:   Type 2 Diabetes;   Diabetic Cardiomyopathies Intervention:   Drug: IMB-1018972 Sponsors:   Imbria Pharmaceuticals, Inc.;   University of Oxford Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04826159?term=diabetes&sfpd_d=14 April 01, 2021 at 05:27PM via ClinicalTrials.gov New diabetes clinical trial: Restoration of Hypoglycemia Awareness With Home-based High Intensity Interval Training Published on: April 01, 2021 at 07:00PM Conditions:   Type 1 Diabetes;   Hypoglycemia Unawareness Interventions:   Device: Continuous glucose monitoring device;   Other: Gold method;   Other: Clarke questionnaire;   Other: Edinburgh Hypoglycemia Symptom Scale;   Other: BAPAD questionnaire;   Other: Hypoglycemia Fear Survey II;   Other: Physical activity questionnaire;   Other: Well-being;   Other: Treatment satisfaction;   Other: Hypoglycemia diary;   Device: Piezo RxD;   Device: Heart rate monitor;   Other: Exercise diary Sponsor:   Institut de Recherches Cliniques de Montreal Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04825366?term=diabetes&sfpd_d=14 April 01, 2021 at 05:27PM via ClinicalTrials.gov New diabetes clinical trial: Serum Pro-Diabetes Inflammation Biomarkers in Patients With Apical Periodontitis. Published on: April 01, 2021 at 07:00PM Conditions:   Apical Periodontitis;   Insulin Resistance;   PreDiabetes;   Diabetes; Stable Intervention:   Sponsor:   University of Turin, Italy Recruiting https://clinicaltrials.gov/ct2/show/NCT04824209?term=diabetes&sfpd_d=14 April 01, 2021 at 05:27PM via ClinicalTrials.gov New diabetes clinical trial: Effects of Acupuncture as Adjunctive Therapy in Patients With Type 2 Diabetes Mellitus Published on: April 02, 2021 at 07:00PM Conditions:   Diabetes Mellitus, Type 2;   Acupuncture Interventions:   Device: SEIRIN PYONEX Acupuncture Needles;   Other: PYONEX Placebo Sponsor:   Universiti Putra Malaysia Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04829045?term=diabetes&sfpd_d=14 April 02, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Food As MedicinE for Diabetes Published on: April 02, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Interventions:   Other: MTM;   Other: Food Subsidy Sponsors:   University of North Carolina, Chapel Hill;   National Institute of Diabetes and Digestive and Kidney Diseases (NIDDK);   Community Servings;   Massachusetts General Hospital Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04828785?term=diabetes&sfpd_d=14 April 02, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: The Impact of Cognitive Behavioral Therapy for Insomnia (CBT-I) on Glycemic Control in Older Type 2 Diabetes (T2D) Comorbid With Insomnia Published on: April 05, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Intervention:   Behavioral: Cognitive Behavioural Therapy Sponsor:   Chinese University of Hong Kong Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04831385?term=diabetes&sfpd_d=14 April 05, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Impact of Periodontal Therapy on Patients With Diabetes Published on: April 05, 2021 at 07:00PM Conditions:   Diabetes Mellitus, Type II;   Periodontitis Interventions:   Drug: Chlorhexidine gluconate oral rinse;   Procedure: Scaling & Root Planing;   Device: Soft Picks Sponsors:   State University of New York at Buffalo;   Sunstar, Inc. Completed https://clinicaltrials.gov/ct2/show/NCT04830969?term=diabetes&sfpd_d=14 April 05, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Cognitive Training for Diabetes Self-Management Published on: April 05, 2021 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Interventions:   Behavioral: Memory, Attention, and Problem Solving Skills for Diabetes;   Behavioral: Brain Games Sponsor:   University of Texas at Austin Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04831775?term=diabetes&sfpd_d=14 April 05, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Intervention to Improve Diabetes Outcomes in Older African American Women With Multi-Caregiving Burden Published on: April 05, 2021 at 07:00PM Condition:   Type 2 Diabetes Interventions:   Behavioral: Multi-Caregiving Intervention;   Behavioral: Diabetes Enhanced Usual Care Intervention Sponsor:   Medical College of Wisconsin Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04831697?term=diabetes&sfpd_d=14 April 05, 2021 at 02:24PM via ClinicalTrials.gov New diabetes clinical trial: Delivering Health: Addressing Diabetes and Food Insecurity Published on: April 05, 2021 at 07:00PM Conditions:   Food Insecurity;   Diabetes Mellitus, Type 2 Intervention:   Behavioral: Type 2 Diabetes Appropriate Food Boxes + Diabetes Education Sponsor:   University of Arkansas Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04831216?term=diabetes&sfpd_d=14 April 05, 2021 at 02:24PM via ClinicalTrials.gov