PT-2016-1814

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 46.0 Description The issue is related to the Firefox Health Reports feature, which does not properly restrict the origin of events. This makes it easier for remote attackers to modify sharing preferences by...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2016-39 Miscellaneous memory safety hazards rv:46.0 / rv:45.1 / rv:38.8 MFSA 2016-42 Use-after-free and buffer overflow in Service Workers MFSA 2016-44 Buffer overflow in libstagefright with CENC offsets MFSA 2016-45 CSP not applied to pages sent with...

Firefox Health Reports could accept events from untrusted domains — Mozilla

Mozilla engineer Mark Goodwin discovered that the Firefox Health Report about:healthreport accepts certain events from any content document present in the remote-report iframe. If there were another vulnerability that allowed the injection of web content into the Firefox Health Report iframe, thi...

S Health - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application S Health published at the 'play' market has multiple vulnerabilities...

Lifesum - The Health Movement - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Lifesum - The Health Movement published at the 'play' market has multiple vulnerabilities...

Men’s Health Deutschland - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Men’s Health Deutschland published at the 'play' market has multiple vulnerabilities...

Women's Health Deutschland - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Women's Health Deutschland published at the 'play' market has multiple vulnerabilities...

TACTIO HEALTH - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TACTIO HEALTH published at the 'play' market has multiple vulnerabilities...

Women's Health Diary - Apache license, BSD license, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Women's Health Diary published at the 'play' market has multiple vulnerabilities...

Health Records - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Health Records published at the 'play' market has multiple vulnerabilities...

Health Encyclopedia - External URLs, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Health Encyclopedia published at the 'play' market has multiple vulnerabilities...

Health-Tracker - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Health-Tracker published at the 'play' market has multiple vulnerabilities...

HI - Health & Fitness Tracker - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application HI - Health & Fitness Tracker published at the 'play' market has multiple vulnerabilities...

Health Manager - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Health Manager published at the 'play' market has multiple vulnerabilities...

99 Tipps für mehr Gesundheit - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application 99 Tipps für mehr Gesundheit published at the 'play' market has multiple vulnerabilities...

Health Mate - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Health Mate published at the 'play' market has multiple vulnerabilities...

Runtastic Health Myths & Facts - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Runtastic Health Myths & Facts published at the 'play' market has multiple vulnerabilities...

MedStar Slowly Restoring Services After Malware Attack

Portions of the hospital chain MedStar Health remain offline Wednesday as a result of a major malware attack that occurred Monday and crippled the hospital’s computer systems and forced one of the largest healthcare providers in Maryland and Washington, D.C. to turn patients away. The healthcare...

Health Files - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Health Files published at the 'play' market has multiple vulnerabilities...

EClinicalWorks Population Health (CCMR) Client Portal Session Fixation Vulnerability

EClinicalWorks Population Health a.k.a. eClinicalWorks CCMR is a suite of population health solutions from EClinicalWorks, Inc. in the U.S. Client Portal is one of the portals. A session fixation vulnerability exists in the EClinicalWorks Population Health Client Portal that can be exploited by a...