Lucene search
+L

1862 matches found

CNNVD
CNNVD
added 2023/11/28 12:00 a.m.12 views

BD FACSChorus Security Breach

BD FACSChorus is a multichannel flow cytometry system from Bidi Medical BD. A security vulnerability exists in the BD FACSChorus that stems from being configured to allow the transmission of hashed user credentials based on a user action without fully verifying the identity of the requested...

3.8CVSS6.8AI score0.00297EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2023/11/13 10:08 p.m.28 views

State of Maine data breach impacts 1.3 million people

The US State of Maine says it has suffered a data breach impacting around 1.3 million people. According to the census from July 2022, thats more or less the the entire population of Maine. The State of Maine says it was compromised via a known vulnerability in secure transfer service MOVEit...

7.1AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2023/10/31 6:28 a.m.25 views

FDA medical IoT cyber device compliance. FD&C 524b

TL;DR FD&C 524b is new FDA legislation for medical cyber device compliance Introduced on March 30th 2023 it is now a firm requirement as of October 1st 2023 It demands provision of complex evidence that manufacturers take security seriously Medical cyber device market There are over 10,000 medica...

7.6AI score
SaveExploits0
The Coalfire Blog
The Coalfire Blog
added 2023/10/23 6:21 p.m.20 views

Guardians of IoT: Strengthening the security of IoT-connected medical devices in the healthcare industry

The healthcare ecosystem requires stakeholders to have a comprehensive grasp of the industry-specific vulnerabilities, especially in its emerging technology. Coalfire examines key healthcare-specific IoT vulnerabilities, helping healthcare IoT manufacturers and medical facility administrations kn...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:00 a.m.18 views

The vulnerability of the DICOM Viewer Pro software lies in its inability to handle excessive heap memory usage, which allows an attacker to execute arbitrary code.

The vulnerability of the DICOM Viewer Pro software for viewing and processing medical images exists due to a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00205EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:00 a.m.14 views

The vulnerability of the DICOM Viewer Pro software in processing medical images allows a hacker to execute arbitrary code by writing outside the buffer.

The vulnerability of the DICOM Viewer Pro software for viewing and processing medical images is related to writing outside the buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00201EPSS
SaveExploits0References4Affected Software1
Rapid7 Blog
Rapid7 Blog
added 2023/10/11 3:16 p.m.18 views

The Risks of Exposing DICOM Data to the Internet

Introduction Digital Imaging and Communications in Medicine DICOM is the international standard for the transmission, storage, retrieval, print, and display of medical images and related information. While DICOM has revolutionized the medical imaging industry, allowing for enhanced patient care...

6.8AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2023/09/29 9:07 p.m.29 views

Friday Squid Blogging: Protecting Cephalopods in Medical Research

From Nature: Cephalopods such as octopuses and squid could soon receive the same legal protection as mice and monkeys do when they are used in research. On 7 September, the US National Institutes of Health NIH asked for feedback on proposed guidelines that, for the first time in the United States...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.13 views

The vulnerability of the software for managing medical organizations, OpenEMR, related to authentication errors, allows a perpetrator to escalate their privileges.

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

5.5CVSS5.8AI score0.0043EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.14 views

The vulnerability of the software for managing medical organizations, OpenEMR, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the software for managing medical organizations like OpenEMR is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.90401EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.12 views

The vulnerability of the OpenEMR software for managing medical organizations, related to improper handling of code generation, allows a hacker to redirect users to any arbitrary URL address.

The vulnerability of the OpenEMR software for managing medical organizations is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to redirect users to any arbitrary URL address...

9CVSS6.1AI score0.0062EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.18 views

The vulnerability of the software for managing medical organizations like OpenEMR, related to lack of access control, allows a intruder to disrupt the logic of the application.

The vulnerability of the software for managing medical organizations like OpenEMR is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disrupt the logic of the application remotely...

9CVSS6.6AI score0.0061EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2023/09/13 12:00 a.m.17 views

Debian: Security Advisory (DLA-3562-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.0415EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/11 12:00 a.m.8 views

PT-2023-27296 · Softneta · Meddream Pacs

Name of the Vulnerable Software and Affected Versions: Softneta MedDream PACS affected versions not specified Description: The issue concerns a lack of authentication check in the affected product, leading to the performance of dangerous functionality. This could result in unauthenticated remote...

9.8CVSS10AI score0.01264EPSS
SaveExploits0References9
Openbugbounty
Openbugbounty
added 2023/09/04 9:32 a.m.9 views

mountainwestmedical.com Cross Site Scripting vulnerability OBB-3644043

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/08/28 4:58 a.m.16 views

medical-case-reports.imedpub.com Cross Site Scripting vulnerability OBB-3621982

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2023/08/24 1:00 p.m.23 views

Safeguard Medical Devices: New H-ISAC Guidance on Cusp of FDA Rule

...

7.1AI score
SaveExploits0
Debian
Debian
added 2023/08/08 9:14 p.m.93 views

[SECURITY] [DSA 5473-1] orthanc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5473-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 08, 2023 https://www.debian.org/security/faq -...

8.8CVSS6.7AI score0.0415EPSS
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2023/08/02 6:30 p.m.18 views

Poorly Purged Medical Devices Present Security Concerns After Sale on Secondary Market

In a post-pandemic landscape, the interconnectedness of cybersecurity is front and center. Few could say that they were not at least aware of, if not directly affected by, the downstream effects of major breaches that cause impacts felt across economies. One should look at disruptions in the glob...

6.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.15 views

The vulnerability of the library for working with the DICOM format in DCMT allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability is related to deficiencies in pathname restrictions for the catalog, which enable attackers to gain access to sensitive information.

The vulnerability of the library for working with the DICOM format in DCMT is related to deficiencies in pathname restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS6.9AI score0.03199EPSS
SaveExploits0References10Affected Software5
Rows per page
Query Builder