Approved changes feed: RSS · Atom

cpe:2.3:a:dario_health:dario_application_database_and_internet-based_server_infrastructure:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDario Health (dcc8b93e-684f-5720-aa88-4f5853d41164)
ProductDario Application Database And Internet Based Server Infrastructure (d92b8a3c-065c-56c7-8405-02c1bd232435)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24849 vulnerable 2026-06-08 07:12:50.062661 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information
HIGH (7.1)
Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure.
Published: 2025-02-28T16:58:55.473Z
Updated: 2025-02-28T21:50:19.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24843 vulnerable 2026-06-08 07:12:50.044892 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control
MEDIUM (5.1)
Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.
Published: 2025-02-28T16:56:11.789Z
Updated: 2025-02-28T21:50:42.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24318 vulnerable 2026-06-08 07:12:48.457390 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag
MEDIUM (6.8)
Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise.
Published: 2025-02-28T17:09:05.687Z
Updated: 2025-02-28T18:19:26.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24316 vulnerable 2026-06-08 07:12:48.455381 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies
MEDIUM (5.3)
The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality.
Published: 2025-02-28T17:11:56.571Z
Updated: 2025-02-28T18:17:46.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23405 vulnerable 2026-06-08 07:10:55.695054 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Improper Output Neutralization For Logs
MEDIUM (5.3)
Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks (ex log injection).
Published: 2025-02-28T16:54:01.759Z
Updated: 2025-02-28T21:51:08.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20060 vulnerable 2026-06-08 07:08:38.873124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20049 vulnerable 2026-06-08 07:08:38.853198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.