Lucene search
+L

4158 matches found

CNNVD
CNNVD
•added 2024/05/08 12:00 a.m.•12 views

BlueNet Technology Clinical Browsing System SQL注入漏洞

BlueNet Technology Clinical Browsing System is a clinical browsing system from BlueNet Technology. A SQL injection vulnerability exists in BlueNet Technology Clinical Browsing System version 1.2.1, which stems from an incorrect manipulation of the parameter INSTICODE that can lead to SQL injectio...

9.8CVSS7AI score0.00838EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/05/08 12:00 a.m.•24 views

PT-2024-32026

Name of the Vulnerable Software and Affected Versions BlueNet Technology Clinical Browsing System version 1.2.1 Description A critical issue has been found, affecting an unknown part of the file /xds/cloudInterface.php. The manipulation of the INSTI CODE argument leads to SQL injection. It is...

9.8CVSS6.8AI score0.00838EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/05/08 12:00 a.m.•27 views

PT-2024-32022

Name of the Vulnerable Software and Affected Versions BlueNet Technology Clinical Browsing System version 1.2.1 Description A critical issue exists in BlueNet Technology Clinical Browsing System version 1.2.1 related to SQL injection. The issue affects an unknown functionality within the...

7.5CVSS7AI score0.00665EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/08 12:00 a.m.•6 views

CVE-2024-4653: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1 and classified as critical. Affected by this issue is some unknown functionality of the file /xds/outIndex.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The...

7.5CVSS5.5AI score0.00665EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/08 12:00 a.m.•5 views

CVE-2024-4654: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/cloudInterface.php. The manipulation of the argument INSTICODE leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS5.5AI score0.00838EPSS
SaveExploits1References1
HackRead
HackRead
•added 2024/05/06 10:09 p.m.•35 views

Cuckoo Mac Malware Mimics Music Converter to Steals Passwords and Crypto

By Deeba Ahmed Cuckoo malware targets macOS users, stealing passwords, browsing history, crypto wallet details & more. Disguised as a music converter, it poses a major security risk. Learn how to protect yourself from this sophisticated infostealer. This is a post from HackRead.com Read the...

7.2AI score
SaveExploits0
NVD
NVD
•added 2024/04/27 4:15 p.m.•22 views

CVE-2024-4257

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack...

6.5CVSS6.8AI score0.12051EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/27 4:00 p.m.•112 views

CVE-2024-4257

BlueNet Technology Clinical Browsing System 1.2.1 has a SQL injection vulnerability in the unknown part of the file /xds/deleteStudy.php caused by manipulating the parameter documentUniqueId . The issue can be triggered remotely and is publicly disclosed per the CVE entry. A remediation is to upd...

6.5CVSS7.3AI score0.12051EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/04/27 4:00 p.m.•14 views

CVE-2024-4257 BlueNet Technology Clinical Browsing System deleteStudy.php sql injection

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack...

6.5CVSS7.3AI score0.12051EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/04/27 4:00 p.m.•39 views

CVE-2024-4257 BlueNet Technology Clinical Browsing System deleteStudy.php sql injection

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack...

6.5CVSS7AI score0.12051EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/27 12:00 a.m.•16 views

BlueNet Technology Clinical Browsing System SQL注入漏洞

BlueNet Technology Clinical Browsing System is a clinical browsing system from BlueNet Technology USA. A SQL injection vulnerability exists in BlueNet Technology Clinical Browsing System version 1.2.1, which stems from the parameter documentUniqueId in the file /xds/deleteStudy.php that can lead ...

6.5CVSS7.9AI score0.12051EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/27 12:00 a.m.•18 views

PT-2024-30030

Name of the Vulnerable Software and Affected Versions BlueNet Technology Clinical Browsing System version 1.2.1 Description A critical issue has been found, affecting an unknown part of the file /xds/deleteStudy.php. The manipulation of the documentUniqueId argument leads to SQL injection. It is...

6.5CVSS7.2AI score0.12051EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/27 12:00 a.m.•3 views

CVE-2024-4257: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack...

6.5CVSS5.5AI score0.12051EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/24 12:00 a.m.•24 views

PT-2024-10086 · Drupal · Drupal Advanced Pwa Inc Push Notifications

Name of the Vulnerable Software and Affected Versions: Drupal Advanced PWA inc Push Notifications versions 0.0.0 through 1.5.0 Description: The issue is related to an incorrect authorization vulnerability in the Drupal Advanced PWA inc Push Notifications module, which allows for forceful browsing...

9.1CVSS7.2AI score0.0037EPSS
SaveExploits0References6
HackRead
HackRead
•added 2024/04/17 1:10 p.m.•27 views

Access Limitless Global Content: How Residential Proxies Enable It

By Uzair Amir Residential proxies bypass geo-restrictions, unlocking global content & websites. Enjoy unrestricted browsing, enhanced privacy, and a world of opportunity for business and personal use. Explore residential proxies today! This is a post from HackRead.com Read the original post: Acce...

7.4AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/04/09 7:00 a.m.•53 views

Description of the security update for SharePoint Server Subscription Edition: April 9, 2024 (KB5002581)

None None...

6.8CVSS6.8AI score0.01395EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2024/04/03 1:07 p.m.•62 views

Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing Attacks

Google on Tuesday said it's piloting a new feature in Chrome called Device Bound Session Credentials DBSC to help protect users against session cookie theft by malware. The prototype – currently tested against "some" Google Account users running Chrome Beta – is built with an aim to make it an op...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2024/04/02 7:08 a.m.•26 views

Google to Delete Billions of Browsing Records in 'Incognito Mode' Privacy Lawsuit Settlement

Google has agreed to purge billions of data records reflecting users' browsing activities to settle a class action lawsuit that claimed the search giant tracked them without their knowledge or consent in its Chrome browser. The class action, filed in 2020, alleged the company misled users by...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/03/25 5:26 p.m.•40 views

CVE-2022-32933

A flaw was found in webkitgtk where a website may be able to track the websites a user visited in private browsing mode...

6.5CVSS9.2AI score0.00418EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/03/22 12:00 a.m.•47 views

Apple Safari Security Update (HT214089)

Apple Safari is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

8.1CVSS6.3AI score0.01496EPSS
SaveExploits0References1
Rows per page
Query Builder