Security Misconfiguration Vulnerability in the AWS SDK for PHP

SECURITY FIX: This release addresses a security issue associated with CVE-2015-5723, specifically, fixes improper default directory umask behavior that could potentially allow unauthorized modifications of PHP code. Thanks to @ryan-lane for the initial report. Aws\Ec2 - Added support for...

Security Misconfiguration Vulnerability in the AWS SDK for PHP

SECURITY FIX: This release addresses a security issue associated with CVE-2015-5723, specifically, fixes improper default directory umask behavior that could potentially allow unauthorized modifications of PHP code. Thanks to @ryan-lane for the initial report. - Aws\Ec2 - Added support for...

SAP EMR Unwired and Clinical Task Tracker Access Restriction Bypass Vulnerabilities

SAP EMR Unwired is a mobile app that enables physicians and nurses to instantly access patient data when they need it.SAP Clinical Task Tracker is an easy and secure way to access clinical tasks assigned to your patients anytime, anywhere. SAP EMR Unwired and Clinical Task Tracker fail to properl...

CVE-2015-2814

SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079...

Code injection

SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079...

CVE-2015-2814

SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079...

CVE-2015-2814

CVE-2015-2814 affects SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile.healthcare.ctt). The issue is an improper access restriction that lets remote attackers modify settings such as backendurl , clientid , ssourl , and infopageurl via unspecified vecto...

CVE-2013-7096

Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-7096

Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-7096

CVE-2013-7096 relates to SAP EMR Unwired and describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The available connected documents confirm the affected product as SAP EMR Unwired and identify the vulnerability cla...

SAP EMR Unwired - Unauthorized access

Application: SAP EMR Unwired com.sap.mobi Versions Affected: latest Vendor URL: http://www.sap.com Bugs: Unauthorized access Exploits: YES Reported: 20.04.2013 Vendor response: 21.04.2013 Date of Public Advisory: 16.11.2013 Reference: SAP Security Note 1864518 CVSS: AV:A/AC:M/AU:S/C:P/I:N/A:N 3.8...

Open EMR 4.0 SQL Injection

Exploit Title: Open EMR Google Dork: inurl:"/interface/login/loginframe.php" intitle:"Login" intext:"Username:" Date: 3 / 08 / 2011 . Author: Mehdi Boukazoula ; Houssam Sahli . Software Link with patch : http://www.oemr.org/wiki/OpenEMRDownloads Version: v 4.0 full patched Tested on: v 4.0...

CVE-2008-2238

Multiple integer overflows in OpenOffice.org OOo 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow...

CVE-2008-2238

CVE-2008-2238 concerns multiple integer overflows in OpenOffice.org 2.x (EMF/EMR parsing) that can trigger a heap-based buffer overflow, potentially allowing remote code execution via crafted EMF files embedded in StarOffice/StarSuite documents. The connected Nessus advisories (ELSA-2008-0939 and...

openoffice.org: EMF files parsing EMR_BITBLT record heap overflows

Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an EMF file with a crafted EMRSTRETCHBLT record, which triggers a heap-based buffer overflow...

openoffice.org: EMF files parsing EMR_BITBLT record heap overflows

Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an EMF file with a crafted EMRSTRETCHBLT record, which triggers a heap-based buffer overflow...