827 matches found
OpenEMR Security Bypass Vulnerability
OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security bypass vulnerability exists in the 'csvloghtml' function in th...
CVE-2017-12064
The csvloghtml function in library/edihistory/edihcsvinc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name...
CVE-2015-4035
scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name...
IBM Rational Software Architect Design Manager Cross-Site Scripting Vulnerability
IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A cross-site...
IBM Rhapsody DM Redirection Vulnerability
IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A security...
IBM Rhapsody DM Cross-Site Scripting Vulnerability (CNVD-2017-25759)
IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A cross-site...
Pivotal Spring Security Deserialization Remote Code Execution Vulnerability
Pivotal Spring Security is a suite of security frameworks from Pivotal Software that provide illustrative security protection for Spring-based applications. A remote code execution vulnerability exists in Pivotal Spring Security versions 4.2.0 through 4.2.2 and 5.0.0.M1. A remote attacker could...
CVE-2016-10364
With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions...
CVE-2017-9380
OpenEMR
WavPack Local Denial of Service Vulnerability
WavPack is an open source, free audio lossless compression software. A local denial of service vulnerability exists in WavPack version 5.0.0. An attacker could exploit this vulnerability to cause a denial of service or obtain sensitive information...
PHPMailer Information Disclosure Vulnerability
PHPMailer is a PHP class library for sending e-mail . A local information disclosure vulnerability exists in PHPMailer versions 5.0.0 through 5.2.22. An attacker can exploit this vulnerability to obtain sensitive information...
Fortinet FortiAnalyzer XSS Vulnerability (FG-IR-16-051)
Fortinet FortiAnalyzer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fortinet FortiAnalyzer Persistent XSS Vulnerability (FG-IR-16-014)
Fortinet Fortianalyzer is prone to a persistent cross-site scripting XSS vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
PHP 5.0.0 - tidy_parse_file() Local Buffer Overflow
PHP 5.0.0 - tidyparsefile Local Buffer Overflow...
PHP 5.0.0 - 'tidy_parse_file()' Buffer Overflow
Exploit for php platform in category local exploits 0day.today 2018-01-01...
PHP 5.0.0 - 'snmpwalkoid()' local denial of service
No description provided by source...
PHP 5.0.0 - 'fbird_[p]connect()' local denial of service
No description provided by source...
PHP 5.0.0 - imap_mail() local denial of service
No description provided by source...
