3599 matches found
File upload vulnerability in health collection reporting system (CNVD-2021-24510)
Health collection and reporting system using PHP + mysql development, open source code, to facilitate secondary development. Health Collection and Reporting System has a file upload vulnerability that can be exploited by attackers to gain control of the server...
File Upload Vulnerability in Droton Mental Health Cloud Platform Software
Jiangsu Zhodun Information Technology Co., Ltd. is an Internet dual-soft, high-tech enterprise specializing in the research and application of psychological big data. There is a file upload vulnerability in the software of ZhuoDun Mental Health Cloud Platform, which can be exploited by an attacke...
SQL Injection Vulnerability in Schoolfree Psychological Assessment System (CNVD-2021-23551)
School Worry Free Psychological Assessment System is a platform that enables online mental health testing and diagnosis through the Internet. SQL injection vulnerability exists in School Worry-free Psychological Assessment System, which can be exploited by attackers to obtain sensitive informatio...
SQL Injection Vulnerability in Schoolfree Psychological Assessment System (CNVD-2021-24370)
The School Worry-Free Psychological Assessment System is a platform for online mental health testing and diagnosis via the Internet. A SQL injection vulnerability exists in the School Worry Free Psychological Assessment System. An attacker can exploit the vulnerability to obtain sensitive...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20353)
Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20354)
Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...
Post-Cyberattack, Universal Health Services Faces $67M in Losses
The cyberattack that hit Universal Health Services UHS in September has cost the healthcare service provider a whopping $67 million in damages, according to financial statements. A fourth-quarter earnings report last week from UHS highlighted the “significant incremental labor expense” needed to...
Payroll/HR Giant PrismHR Hit by Ransomware?
PrismHR, a company that sells technology used by other firms to help more than 80,000 small businesses manage payroll, benefits, and human resources, has suffered what appears to be an ongoing ransomware attack that is disrupting many of its services. Hopkinton, Mass.-based PrismHR handles...
Microsoft's Dream of Decentralized IDs Enters the Real World
The company will launch a public preview of its identification platform this spring—and has already tested it at the UK's National Health Service...
envoy:health_check_fuzz_test: Invalid-free in void std::__1::__libcpp_operator_delete<void*>
Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=4973192743616512 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6240000d1be8 Cra...
Privacy predictions for 2021
2020 saw an unprecedented increase in the importance and value of digital services and infrastructure. From the rise of remote working and the global shift in consumer habits to huge profits booked by internet entertainers, we are witnessing how overwhelmingly important the connected infrastructu...
Top Cyber Attacks of 2020
With so much of the world transitioning to working, shopping, studying, and streaming online during the coronavirus pandemic, cybercriminals now have access to a larger base of potential victims than ever before. "Zoombomb" became the new photobomb—hackers would gain access to a private meeting o...
CVE-2021-1312
A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...
CVE-2021-1312
A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...
Design/Logic Flaw
A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...
CVE-2021-1312 Cisco Elastic Services Controller Denial of Service Vulnerability
A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...
CVE-2021-1312 Cisco Elastic Services Controller Denial of Service Vulnerability
A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...
CVE-2021-1312
A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...
Cisco Elastic Services Controller Denial of Service Vulnerability
A vulnerability in the system resource management of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to cause a denial of service DoS to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for...
Design/Logic Flaw
Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications component: Letters. The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. While the...