OpenEMR <= 6.0.0.4 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

PT-2022-10154 · Unknown · Mdt Autosave

Name of the Vulnerable Software and Affected Versions: MDT AutoSave versions prior to v6.02.06 Description: An issue exists where an attacker could leverage an API to pass a malicious file, manipulating the process creation command line and potentially running a command line argument. This could...

Amazon Corretto Java 8.x < 8.275.01.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.275.01.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2020-Nov-04 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.9.11.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.9.11.2. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Oct-22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Amazon Corretto Java 16.x < 16.0.2.7.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 16 16.0.2.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-jdk16-2021-Jul-20 advisory. - core-libs/java.net CVE-2021-2341 - security-libs/java.security CVE-2021-2369 - hotspot/compiler...

Amazon Corretto Java 8.x < 8.282.08.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.282.08.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2021-Jan-19 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 16.x < 16.0.1.9.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 16 16.0.1.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-jdk16-2021-Apr-20 advisory. - core-libs/java.io CVE-2021-2161 - security-libs/java.security CVE-2021-2163 Note that Nessus ha...

Amazon Corretto Java 11.x < 11.0.6.10.1-2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.6.10.1-2. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Jan-23 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

IdeaRE RefTree Path Traversal Vulnerability

=============================================================================== title: IdeaRE RefTree Download Path Traversal product: IdeaRE RefTree =============================================================================== EXECUTIVE SUMMARY RefTree is a web application made for managing...

OpenEMR <= 6.0.0 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

GitLab 11.1.0, 11.1.1 DoS Vulnerability

GitLab is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

GitLab 8.8.x - 10.1.5, 10.2.x - 10.2.5, 10.3.x - 10.3.3 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

PT-2022-18711 · Gnu +2 · Gnu Gcc +2

Name of the Vulnerable Software and Affected Versions: GNU GCC version 11.2 Description: The issue in libiberty/rust-demangle.c allows stack consumption in demangle const. This can be demonstrated using nm-new. Recommendations: For GNU GCC version 11.2, update to a newer version that contains a f...

PT-2022-16872 · Unknown · Grpc Swift

Name of the Vulnerable Software and Affected Versions: grpc-swift versions prior to 1.7.2 Description: The issue is a denial of service attack via a reachable assertion, caused by incorrect logic when handling GOAWAY frames. This attack requires minimal resources to construct and send the require...

GitLab 12.10.x - 14.6.4, 14.7.x - 14.7.3, 14.8.x - 14.8.1 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

GitLab 11.2.x - 11.2.6, 11.3.x - 11.3.7, 11.4.x - 11.4.2 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

PT-2022-17710 · Pnpm · Pnpm

Name of the Vulnerable Software and Affected Versions: PNPM versions 6.15.1 and below Description: The issue is related to an untrusted search path in PNPM, which can cause the application to behave in unexpected ways when users execute PNPM commands in a directory containing malicious content...

PT-2022-15574 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions. This issue was addressed with improved checks...

PT-2022-15601 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: A logic issue was addressed with improved restrictions, which could allow a malicious website to access information about the user and their devices. Recommendations: For i...

PT-2022-9364 · WordPress · Amp For Wp

Name of the Vulnerable Software and Affected Versions: AMP for WP – Accelerated Mobile Pages plugin versions = 1.0.77.31 Description: An Authenticated Stored Cross-Site Scripting XSS issue was found. This issue affects users with admin+ privileges. Recommendations: For AMP for WP – Accelerated...