EUVD-2020-3791

Malware in sbrugna...

EUVD-2020-3792

Malware in sbrugna...

EUVD-2019-16121

Malware in sbrugna...

EUVD-2020-3790

Malware in sbrugna...

EUVD-2020-3793

Malware in sbrugna...

EUVD-2013-6882

Malware in sbrugna...

EUVD-2015-2902

Malware in sbrugna...

Malicious code in emr-ccd (npm)

The package emr-ccd was found to contain malicious code...

MAL-2025-19631 Malicious code in emr-ccd (npm)

The package emr-ccd was found to contain malicious code...

Amazon EMR 安全漏洞

Amazon EMR is a hosted clustering platform from Amazon.com, USA. A security vulnerability exists in Amazon EMR that stems from a keytab file stored in the /tmp/ directory that could lead to elevation of privilege...

CVE-2025-8904: Storing Passwords in a Recoverable Format

Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...

CVE-2025-50594: Weak Password Recovery Mechanism for Forgotten Password

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

CVE-2024-26476

An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereqform.php component...

CVE-2021-39375

Philips Healthcare Tasy Electronic Medical Record EMR 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter...

CVE-2020-11437

LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database...

CVE-2020-11438

LibreHealth EMR v2.0.0 is affected by systemic CSRF...

CVE-2020-11439

LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application...

CVE-2020-11436

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators...

CVE-2019-6562

In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2019-13557

In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information...