21397 matches found
2022-06 Dynamic Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5014699)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2022-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5014702)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2022-06 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5014710)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2022-06 Cumulative Update for Windows 11 for x64-based Systems (KB5014697)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
All Bachmann M1 System Processor Modules Use of Password Hash with Insufficient Computational Effort (CVE-2020-16231)
The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life...
Security Bulletin: IBM Event Streams is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44832)
Summary There is a vulnerability in the Apache Log4j open source library. The library is used by IBM Event Streams. Vulnerability Details CVEID:CVE-2021-44832 DESCRIPTION: Apache Log4j could allow a remote attacker with permission to modify the logging configuration file to execute arbitrary code...
CVE-2022-31496
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/managesitefiles.php access...
Input validation
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/managesitefiles.php access...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
Cross site scripting
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
LibreHealth EHR Cross-Site Scripting Vulnerability (CNVD-2022-65033)
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare settings. a cross-site scripting vulnerability exists in LibreHealth EHR Base version 2.0.0. The vulnerability stems from a...
PT-2022-20764 · Unknown · Librehealth Ehr Base
Name of the Vulnerable Software and Affected Versions: LibreHealth EHR Base version 2.0.0 Description: The issue allows for incorrect access to the interface/super/manage site files.php. The estimated number of potentially affected devices worldwide is not available. There is no information about...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
CVE-2022-31494
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...
Cross site scripting
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...
CVE-2022-31494
CVE-2022-31494 affects LibreHealth EHR Base 2.0.0 where the gacl/admin/acl_admin.php page’s action parameter is vulnerable to cross-site scripting (XSS). The issue is described across multiple sources (Red Hat, CNVD, OSV, CVE listings) as a stored/ reflexive XSS condition in this parameter. The a...
