3087 matches found
MAL-2025-34245 Malicious code in sutter-health-user-authentication (npm)
The package sutter-health-user-authentication was found to contain malicious code...
OPPO HEALTH APP 安全漏洞
OPPO HEALTH APP is a health mobile app from China's OPPO. A security vulnerability exists in OPPO HEALTH APP, which originates from the introduction of malicious JS code via loading an arbitrary external URL via the WebView component, which may steal user tokens...
CVE-2025-50594
An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...
CVE-2025-50594
An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...
CVE-2025-50594
The CVE-2025-50594 entry relates to Danphe Health Hospital Management System EMR 3.2. A vulnerability in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs allows attackers to reset any user account password, indicating a broken access control/permissions check. Reports i...
PT-2025-33030 · Unknown · Danphe Health Hospital Management System Emr
Name of the Vulnerable Software and Affected Versions: Danphe Health Hospital Management System EMR version 3.2 Description: An issue exists in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs that allows attackers to reset any account password. Recommendations: At the...
CVE-2025-50594
An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...
Danphe Health Hospital Management System EMR 安全漏洞
Danphe Health Hospital Management System EMR is a hospital management system from Danphe Health, Nepal. A security vulnerability exists in Danphe Health Hospital Management System EMR version 3.2, which stems from /Settings/SecuritySettingsController.cs not properly verifying permissions, which...
Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments
Update 08/12/2025: CISA has updated this alert to provide clarification on identifying Exchange Servers on an organization’s networks and provided further guidance on running the Microsoft Exchange Health Checker. Update 08/07/2025: CISA issued Emergency Directive ED 25-02: Mitigate Microsoft...
Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063222)
None None...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 12, 2025 (KB5063224)
None None...
Description of the security update for Microsoft Exchange Server 2016: August 12, 2025 (KB5063223)
None None...
Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063221)
None None...
Linux Distros Unpatched Vulnerability : CVE-2024-21212
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0...
The vulnerability of the application software of the Central Medical Information System of the State Health Information System (GIS SZ), related to the unencrypted storage of critical information, allows a perpetrator to disclose identification data.
The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...
Linux Distros Unpatched Vulnerability : CVE-2022-49031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403readraw KASAN report out-of-bounds read as...
CVE-2025-21019
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability...
Meta accessed women’s health data from Flo app without consent, says court
A jury has ruled that Meta accessed sensitive information from a woman's reproductive health tracking app without consent. The app in question is called Flo Health. Developed in 2015 in Belarus to track menstrual cycles, it has evolved over the years as a tracking app for highly detailed, intimat...