Lucene search
+L

3555 matches found

CNVD
CNVD
•added 2023/11/24 12:00 a.m.•23 views

Weak Password Vulnerability in the Application Basic Service Management System of Xiamen Nalon Health Technology Co.

Founded in 2002, Xiamen Nalon Health Science & Technology Co., Ltd. is a high-tech enterprise integrating the research and development, production, sales and software service of medical electronic instruments and equipment. A weak password vulnerability exists in the application infrastructure...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/11/24 12:00 a.m.•17 views

PT-2023-30962

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions 3.0.0 through 3.0.1 Description The issue concerns the exposure of sensitive information to unauthorized actors, potentially including database credentials. This exposure can occur in Apache DolphinScheduler,...

7.5CVSS7.5AI score0.01191EPSS
SaveExploits0References15
Openbugbounty
Openbugbounty
•added 2023/11/23 11:58 a.m.•7 views

just-health.net Cross Site Scripting vulnerability OBB-3790995

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.3AI score
SaveExploits0
OSV
OSV
•added 2023/11/23 10:15 a.m.•14 views

CVE-2023-3631

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection.This issue affects Medart Notification Panel: through 20231123. NOTE: The vendor was contacted early about this disclosure but...

9.8CVSS5.8AI score0.00809EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/23 10:15 a.m.•21 views

CVE-2023-3631

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection. This issue affects Medart Notification Panel: through 20231123. NOTE: The vendor was contacted early about this disclosure but...

9.8CVSS0.00809EPSS
SaveExploits0References3
Prion
Prion
•added 2023/11/23 10:15 a.m.•19 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection.This issue affects Medart Notification Panel: through 20231123. NOTE: The vendor was contacted early about this disclosure but...

7.5CVSS7.8AI score0.00809EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/23 9:13 a.m.•34 views

CVE-2023-3631 SQLi in Medart Notification Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection. This issue affects Medart Notification Panel: through 20231123. NOTE: The vendor was contacted early about this disclosure but...

9.8CVSS9.9AI score0.00809EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/11/23 12:00 a.m.•17 views

Medart Health Services SQL Injection Vulnerability

Medart Health Services is an application from Medart, Inc. A SQL injection vulnerability exists in Medart Health Services Medart Notification Panel version 20231123 and prior versions, which stems from improper neutralization of special elements...

9.8CVSS8AI score0.00809EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/11/19 9:13 p.m.•8 views

fedpd.cardinalhealth.com Cross Site Scripting vulnerability OBB-3785835

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2023/11/14 8:00 a.m.•435 views

Description of the security update for Microsoft Exchange Server 2016: November 14, 2023 (KB5032147)

None None...

8CVSS7.1AI score0.86588EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2023/11/14 8:00 a.m.•150 views

Description of the security update for Microsoft Exchange Server 2019 and 2016: November 14, 2023 (KB5032146)

None None...

8CVSS7AI score0.86588EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2023/11/14 12:00 a.m.•31 views

This Week in Spring - November 14th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's November 14th, and you know what that means? NINE MORE DAYS until Spring Boot 3.2 drops on the day of the US holiday of Thanksgiving, no less! Some key features include: virtual threads initial CRaC support more...

7.1AI score
SaveExploits0
HackRead
HackRead
•added 2023/11/13 12:03 p.m.•35 views

HiBoB Experts Reveal: Top Cybersecurity Threats for Employee Data

By Waqas Employee data—it contains some of your companys most sensitive information. Salaries, social security numbers, health records…this stuff is… This is a post from HackRead.com Read the original post: HiBoB Experts Reveal: Top Cybersecurity Threats for Employee Data...

7.3AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2023/11/13 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-29153

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5...

7.5CVSS6.8AI score0.08746EPSS
SaveIn wildExploits0References443
Malwarebytes
Malwarebytes
•added 2023/11/08 5:59 p.m.•30 views

Introducing Security Advisor Site Scores for OneView: Easy assessment of client security for MSPs

In a world rife with cyber threats, it is crucial for Managed Service Providers MSPs to conduct thorough assessments of their clients’ security posture. Even minor misconfigurations, if overlooked, can leave clients vulnerable to attacks. Yet, lacking the necessary tools, many MSP IT teams are in...

6.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2023/11/08 1:27 a.m.•54 views

Important: Red Hat Security Advisory: Node Health Check Operator 0.6.1 security update

This is an updated version for the node-healthcheck-must-gather-container, the node-healthcheck-operator-bundle-container, the node-healthcheck-operator-container, and the node-remediation-console-container. It is now available for Node Health Check Operator 0.6 for RHEL 8. Red Hat Product Securi...

7.5CVSS6.8AI score0.99999EPSS
SaveExploits21References4
RedHat Linux
RedHat Linux
•added 2023/11/08 1:18 a.m.•56 views

Important: Red Hat Security Advisory: Node Health Check Operator 0.4.1

This is an updated version of the Node Health Check Operator. This Operator is delivered by Red Hat Workload Availability. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

7.5CVSS6.8AI score0.99999EPSS
SaveExploits21References4
OSV
OSV
•added 2023/11/07 8:15 a.m.•15 views

CVE-2023-42539

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/07 8:15 a.m.•38 views

CVE-2023-42539

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data...

5.5CVSS4.8AI score0.0016EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/07 8:15 a.m.•23 views

Spoofing

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data...

1.7CVSS6.8AI score0.0016EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder