28483 matches found
CVE-2025-35031
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08...
CVE-2025-35030
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08...
CVE-2025-35032
Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...
CVE-2025-35034
Medical Informatics Engineering Enterprise Health is affected by a reflected cross-site scripting vulnerability in the portlet_user_id URL parameter. A remote, unauthenticated attacker can craft a URL to execute arbitrary JavaScript in a victim’s browser. The issue is fixed as of 2025-03-14. Acco...
CVE-2025-35031
Medical Informatics Engineering Enterprise Health is affected by CVE-2025-35031, where the software includes the user’s current session token in debug output. This enables an attacker to impersonate the user if the token is exfiltrated (e.g., via the user sending debug output). The issue is fixed...
CVE-2025-60093
creationtimestamp| type| source ---|---|--- 2025-09-29 17:01:10+00:00| seen| Telegram/aS2NF6cfAcIzS5IvvBcwEaBPnqehzkRWs0HUBmS6voJdLp0...
CVE-2025-60092
creationtimestamp| type| source ---|---|--- 2025-09-29 17:01:09+00:00| seen| Telegram/zbHRJcABxnT9ljt1um58u91lGqDe58FmjyBFp7fEaw7HE8...
CVE-2024-13150
CVE-2024-13150 describes an SQL Injection in Fayton Software and Consulting Services fayton.Pro ERP. The vulnerability arises from improper neutralization of special elements in SQL commands, enabling potential unauthorized access to the full database. Affected product is fayton.Pro ERP (through ...
Libsoup: out-of-bounds read in cookie date handling of libsoup http library
...
CVE-2025-11123
creationtimestamp| type| source ---|---|--- 2025-09-29 00:03:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzwpidycjo26...
PT-2025-39871
Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health affected versions not specified Description The software contains a cross site request forgery condition. An unauthenticated attacker can deceive administrative users into clicking a specially...
PT-2025-39873
Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health versions prior to 2025-04-08 Description Authenticated users are able to upload arbitrary files. The impact of this behavior is dependent on how these files are accessed. Approximately 2000...
CVE-2025-11103
creationtimestamp| type| source ---|---|--- 2025-09-28 11:31:33+00:00| seen| https://bsky.app/profile/potato.software/post/3lzvfi7nv6h2m...
CVE-2025-56708
creationtimestamp| type| source ---|---|--- 2025-09-28 10:02:27+00:00| seen| https://sploitus.com/exploit?id=257FED44-A54B-5842-A9EF-409B92DE6D91&utmsource=rss&utmmedium=rss 2025-09-28 10:02:27+00:00| seen|...
CVE-2025-11101
creationtimestamp| type| source ---|---|--- 2025-09-28 09:02:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzv55wtwkj2a...
CVE-2025-60173
creationtimestamp| type| source ---|---|--- 2025-09-28 07:32:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzuy56hfcj2i...
CVE-2025-60156
creationtimestamp| type| source ---|---|--- 2025-09-28 00:02:50+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzu6yorayg2k...
CVE-2025-11066
creationtimestamp| type| source ---|---|--- 2025-09-27 16:32:14+00:00| seen| https://gist.github.com/Darkcrai86/f722efc1fb47daccfeeb9207d23ffd5b...