nilohealth.com Cross Site Scripting vulnerability OBB-3432393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-47376

The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data...

Default credentials

The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data...

Description of the security update for Microsoft Exchange Server 2016: June 13, 2023 (KB5025903)

None None...

provider.skagitregionalhealth.org Cross Site Scripting vulnerability OBB-3412629

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apps.smarthealthit.org Cross Site Scripting vulnerability OBB-3395390

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-33967 EaseProbe vulnerable to SQL injection when using MySQL/PostgreSQL data checking

EaseProbe is a tool that can do health/status checking. An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0...

EaseProbe SQL注入漏洞

EaseProbe is a simple, standalone, lightweight tool to perform health/status checks, written in Go. A security vulnerability exists in EaseProbe versions prior to 2.1.0 that stems from the presence of a SQL injection issue...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Papaya Medical Viewer 1.0 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Title ===== SCHUTZWERK-SA-2022-001: Cross-Site-Scripting in Papaya Medical Viewer Status ====== PUBLISHED Version ======= 1.0 CVE reference ============= CVE-2023-33255 Link ==== https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2022-001/ Text-onl...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: use-after-free in nftables when processing batch requests can lead to privilege escalation CVE-2023-32233 For more details about the security issues, including the impact, a CV...

WordPress Health Check & Troubleshooting Plugin < 1.6.0 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:healthcheck%26troubleshooting"; ifdescription...

CVE-2022-47161

Cross-Site Request Forgery CSRF vulnerability in The WordPress.Org community Health Check & Troubleshooting plugin = 1.5.1 versions...

CVE-2022-47161 WordPress Health Check & Troubleshooting Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in The WordPress.Org community Health Check & Troubleshooting plugin = 1.5.1 versions...

WordPress plugin Health Check & Troubleshooting 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Health Industry Cybersecurity Best Practices 2023

This blog explains the new resources of health industry cybersecurity practices and landscape analysis which the HHS U.S. Department of Health and Human Services released in Apr 2023...

PT-2023-15204

Name of the Vulnerable Software and Affected Versions The WordPress.Org community Health Check & Troubleshooting plugin versions = 1.5.1 Description A Cross-Site Request Forgery CSRF issue affects the plugin, potentially allowing unauthorized actions to be performed on behalf of a user...

CVE-2022-47161: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in The WordPress.Org community Health Check & Troubleshooting plugin = 1.5.1 versions...

It’s really OK to take a break sometimes, especially in security

Welcome to this weeks edition of the Threat Source newsletter. You probably already know this by now, but May is Mental Health Awareness Month across the globe. Many people will apply this time of reflection and education to their personal lives -- its easy to discuss anxiety, depression and othe...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to gain unauthorized access to the device or cause a partial service failure.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely, or cause a partial service...