Mozilla Firefox Security Advisory (MFSA2016-48) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2021-25506

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service...

CVE-2021-25506

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service...

Denial of service

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service...

CVE-2021-25506

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service...

CVE-2021-25506

CVE-2021-25506 affects Samsung Health prior to version 6.19.1.0001. The issue arises from a non-existent provider, enabling access via a malicious content provider and potentially causing a denial of service. The vulnerability is characterized with a CVSSv3.1 base score of 5.5 (LOCAL, LOW attack ...

CVE-2021-25506

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service...

Samsung Health 授权问题漏洞

Samsung Health is a health management app from Samsung South Korea. A security vulnerability exists in Samsung Health versions prior to 6.19.1.0001, which can be exploited by attackers to cause a denial of service...

CVE-2021-25506: Improper Authentication

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service...

PT-2021-16696

Name of the Vulnerable Software and Affected Versions Samsung Health versions prior to 6.19.1.0001 Description The issue allows an attacker to access Samsung Health via a malicious content provider or lead to denial of service due to a non-existent provider. Recommendations For versions prior to...

health-in-mind.org.uk Cross Site Scripting vulnerability OBB-2233084

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Philips Tasy EMR

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Philips Equipment: Tasy EMR Vulnerabilities: SQL Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in patient’s confidential data...

VMware vCenter Server Improper Input Validation Vulnerability

VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution...

Veeam ONE version 10/10a impact on VMware vSAN

Challenge The API calls used by Veeam ONE version 10/10a to collect vSAN performance data may impact vSAN health and performance in some environments. Solution Upgrade Veeam ONE to version 11 or later. Starting with Veeam ONE v11, a new collection method was implemented to prevent this issue. Vee...

DHIS 2 SQL注入漏洞

DHIS 2 is a software application. A flexible information system for data capture, management, validation, analysis and visualization. DHIS 2 suffers from a SQL injection vulnerability that stems from a SQL injection security hole in a specific version of DHIS 2. The vulnerability affects API...

Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices

Microsoft has published a new advisory warning of a security bypass vulnerability affecting Surface Pro 3 convertible laptops that could be exploited by an adversary to introduce malicious devices within enterprise networks and defeat the device attestation mechanism. Tracked as CVE-2021-42299 CV...

womens-health.com Improper Access Control vulnerability OBB-2175756

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ucsdcommunityhealth.org Improper Access Control vulnerability OBB-2175733

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

What's New in InsightIDR: Q3 2021 in Review

This post offers a closer look at some of the recent updates and releases in InsightIDR, our extended detection and response solution, from Q3 2021. Welcome IntSights to the Rapid7 Insight Platform family! As you may have seen in recent communications, Rapid7 acquired IntSights, a leading provide...

Ex-army admin jailed for 12 years over US military health data theft

By Deeba Ahmed Frederick Brown, a medical data technician & admin associated with the 65th Medical Brigade of the US Army caused millions of dollars in losses. This is a post from HackRead.com Read the original post: Ex-army admin jailed for 12 years over US military health data theft...