Design/Logic Flaw

Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-2000

Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-2000

HP System Health Application and Command Line Utilities for Linux before v9.0.0 are affected by multiple vulnerabilities that can allow remote arbitrary code execution. The CVE-2012-2000 entry is linked to HP Security Bulletin HPSBMU02772, which cites a CVSS v2 base score of 7.5 (AV:N/AC:L/Au:N/C...

PT-2012-3715

Name of the Vulnerable Software and Affected Versions HP System Health Application and Command Line Utilities versions prior to 9.0.0 Description The issue involves multiple unspecified vulnerabilities that allow remote attackers to execute arbitrary code. The exact vectors used for the attack ar...

CVE-2012-2000: Undefined Security Weakness

Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors...

Fat Finger Error Lands Welsh Health Board $114K Fine

An e-mail gaffe and a spelling mistake by a doctor led to a breach of the UK’s Data Protection Act last year, according to a press release by the Information Commissioner’s Office today. The Aneurin Bevan Health Board ABHB in South Wales was fined £70,000 about $114,000 USD after it mistakenly se...

Utah Data Breach of 181,000 Records Blamed on Configuration Error

Nearly 200,000 people who receive benefits from the Medicaid and Child Health Insurance Plan in Utah have had their personal information–including Social Security numbers in some cases–compromised as part of an intrusion on the network at the Utah Department of Technology Services. The 181,000...

US UF Services EDU Health File Inclusion

Title: ====== US UF Services EDU Health - File Include Vulnerability Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=414 VL-ID: ===== 414 Introduction: ============= The Uniformed Services University of the Health Sciences USU is a health science...

US UF Services EDU Health - File Include Vulnerability

Document Title: =============== US UF Services EDU Health - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=414 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 414...

What We Learned at HIMSS12

A few weeks ago, more than 35,000 healthcare IT professionals and 1,100 exhibitors converged on Las Vegas. Some were there to go shopping for "HIT" or health information technology; others were there to sell it. The IT professionals from across the healthcare spectrum were there to meet with each...

BlueCross BlueShield to Pay $1.5m for HIPAA Violation

Blue Cross Blue Shield of Tennessee agreed to pony up $1.5 million to the U.S. Department of Health and Human Services HHS for a HIPAA violation in 2009, according to a ComputerWorld report. This payment is the settlement of a violation of the Health Insurance Portability and Accountability Act...

Privacy Fail: Is Uncle Sam Encouraging Bad Security?

CANCUN, MEXICO – A prominent privacy activist says that leading software vendors, and the U.S. government are failing the public when it comes to Internet privacy, and that big changes are needed to prevent consumers from criminals, advertisers and government spies. Christopher Soghoian, a...

Unfixed XSS vulnerability at health-online.co.il

Security researcher Codeshift3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting health-online.co.il, which at the time of submission ranked 5707763 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2012. It i...

Electronic Health Records and Meaningful Use: Protecting Electronic Health Information

Since 2009, healthcare providers and other companies providing services to the healthcare industry have been mobilizing to take advantage of government incentives to implement Electronic Health Records or EHRs. These incentives were established by federal law as a part of the HITECH Act of 2009,...

Hey @BarackObama ! Please don't extradite Gary McKinnon, CC : @Number10gov

Hey @BarackObama ! Please don't extradite Gary McKinnon Gary McKinnon, a Scottish systems administrator and hacker who has been accused of what one U.S. prosecutor claims is the "biggest military computer hack of all time" by hacking into the Pentagon, faces an ordeal of terrifying brutality if h...

OpenEMR 4.1.0 SQL Injection

Information -------------------- Name : SQL Injection Vulnerability in OpenEMR Software : OpenEMR 4.1.0 and possibly below. Vendor Homepage : http://www.open-emr.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Canberk Bolat Advisory Reference : NS-12-001 Description...

[SECURITY] Fedora 16 Update: ipmitool-1.8.11-8.fc16

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...

CVE-2011-4856

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/health/parameters and certain other files. NOTE: ...

PT-2011-5147

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.4.4 build20111103.18 Description The issue involves the Control Panel in Parallels Plesk Panel sending incorrect Content-Type headers for certain resources. This could potentially allow remote attackers to have...

PT-2011-5056

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.2.0 build1011110331.18 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Server Administration Panel. These vulnerabilities allow remote attackers to inject arbitrary web...