Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter usrid in the file /dashboard/admin/healthstatusentry.php that can lead to SQL injection...

WordPress Page Health-O-Meter plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Page Health-O-Meter versions = 2.0...

CISA: Security and Resiliency Guide - Healthcare and Public Health Facility Annex

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

BayMark Health Services sends breach notifications after ransomware attack

BayMark Health Services, Inc. BayMark notified an unknown number of patients that attackers stole their personal and health information. BayMark profiles itself as North America’s largest provider of medication-assisted treatment MAT for substance use disorders helping tens of thousands of...

CVE-2024-13173

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13173 Health information leakage vulnerability

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13173 Health information leakage vulnerability

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13173

The Vivo Health application (an exercise instruction and health management software) is vulnerable to information leakage due to insufficient restrictions on loading URLs . This security flaw affects versions prior to 4.1.6.33 . The vulnerability allows for partial information disclosure because ...

PT-2025-2036 · Unknown · Health Module

Name of the Vulnerable Software and Affected Versions: Health module affected versions not specified Description: The health module has insufficient restrictions on loading URLs, which may lead to some information leakage. Recommendations: At the moment, there is no information about a newer...

Vivo Health 访问控制错误漏洞

Vivo Health is an exercise instruction and health management software from the Chinese company Vivo. A security vulnerability exists in Vivo Health versions prior to 4.1.6.33, which stems from an insufficient restriction on loading URLs and could lead to partial information disclosure...

CVE-2024-13173: Missing Authentication for Critical Function

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

openSUSE 15 Security Update : etcd (openSUSE-SU-2025:0003-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0003-1 advisory. Update to version 3.5.12: Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795 test: fix TestHashKVWhenCompacting: ensure all goroutine...

OPENSUSE-SU-2025:0003-1 Security update for etcd

This update for etcd fixes the following issues: Update to version 3.5.12: Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795 test: fix TestHashKVWhenCompacting: ensure all goroutine finished print error log when creating peer listener failed mvcc: Printing etcd backend database related...

SUSE CVE-2024-56716

In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsimdevhealthbreakwrite If either a zero count or a large one is provided, kernel can crash...

DEBIAN-CVE-2024-56716

In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsimdevhealthbreakwrite If either a zero count or a large one is provided, kernel can crash...

UBUNTU-CVE-2024-56716

In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsimdevhealthbreakwrite If either a zero count or a large one is provided, kernel can crash...

PT-2024-37028

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the netdevsim component in the Linux kernel, where bad user input in the nsim dev health break write function can cause the kernel to crash if either a zero count or a...

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

Hackers Demand Ransom in Rhode Island Health System Data Breach

In a major cyberattack, the state of Rhode Island has fallen victim to a security breach potentially exposing the personal information of thousands of residents...

CVE-2024-10476

CVE-2024-10476 concerns default credentials in BD Diagnostic Solutions products. The BD advisories and cross-ref entries state that attackers could access, modify, or delete data (including PHI/PII) and potentially disrupt availability. The scope notes that BD Synapsys Informatics Solution is in ...