CVE-2018-18977

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reverse engineer the codebase to extract sensitive data that contributes to the disclosure of medical information of patients utilizing the Ascensia platform. This occurs because of weak obfuscation.

• CWE-200

• https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabeticExploit, Third Party Advisory
• https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabeticExploit, Third Party Advisory

Published

May 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18964osCommerce 2.3.4.1 has an incomplete '.htaccess' for blackli…
• CVE-2018-18965osCommerce 2.3.4.1 has an incomplete '.htaccess' for blackli…
• CVE-2018-18966osCommerce 2.3.4.1 has an incomplete '.htaccess' for blackli…
• CVE-2018-1897IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11…8.4
• CVE-2018-18975An issue was discovered in the Ascensia Contour NEXT ONE app…
• CVE-2018-18976An issue was discovered in the Ascensia Contour NEXT ONE app…
• CVE-2018-18978An issue was discovered in the Ascensia Contour NEXT ONE app…
• CVE-2018-18979An issue was discovered in the Ascensia Contour NEXT ONE app…
• CVE-2018-18980An XML External Entity injection (XXE) vulnerability exists …
• CVE-2018-18981In Rockwell Automation FactoryTalk Services Platform 2.90 an…
• CVE-2018-18982NUUO CMS All versions 3.3 and prior the web server applicati…
• CVE-2018-18983VT-Designer Version 2.1.7.31 is vulnerable by the program re…