134 matches found
PT-2024-21396 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: open-emr versions prior to 7.0.2 Description: An issue in open-emr allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq form.php component. Recommendations: For versions prior to 7.0.2, upda...
CVE-2024-26476
OpenEMR prior to 7.0.2 is affected by CVE-2024-26476. A remote attacker can escalate privileges by sending a crafted script to the formid parameter in ereq_form.php. The Red Hat and OSV entries confirm the same issue in OpenEMR’s ereq_form.php formid handling, implying a privilege escalation vuln...
emr-rosario.gob.ar Cross Site Scripting vulnerability OBB-3860783
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Amazon Linux 2 : emr-puppet (ALASEMR-PUPPET-2023-001)
The version of emr-puppet installed on the remote host is prior to 6.17.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2EMR-PUPPET-2023-001 advisory. A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a...
Medium: emr-puppet
Issue Overview: A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'. CVE-2021-27025 Affected Packages: emr-puppet Note: This advisory is applicable to Amazon Linux 2 -...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: out-of-bounds write caused by unclear skb-cb CVE-2023-3090 kernel: UAF in nftables when nftsetlookupglobal triggered after handling named and anonymous sets in batch requests...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to writing beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to writing beyond buffer boundaries in memory during the execution of the EMRCOMMENTEMFPLUS command in EMF files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a...
Critical Flaws in Philips TASY EMR Could Expose Patient Data
The U.S. Cybersecurity and Infrastructure Security Agency CISA is warning of critical vulnerabilities affecting Philips Tasy electronic medical records EMR system that could be exploited by remote threat actors to extract sensitive personal data from patient databases. "Successful exploitation of...
Philips Tasy EMR
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Philips Equipment: Tasy EMR Vulnerabilities: SQL Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in patient’s confidential data...
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
Sumavision Enhanced Multimedia Router EMR contains a cross-site request forgery CSRF vulnerability allowing the creation of users with elevated privileges as administrator on a device...
Philips Healthcare Tasy Electronic Medical Record (EMR) SQL Injection Vulnerability (CNVD-2021-94942)
Philips Healthcare Tasy Electronic Medical Record EMR is a comprehensive healthcare informatics solution that addresses all areas of the healthcare environment, connecting the dots between clinical and non-clinical areas of the healthcare continuum. philips Healthcare Tasy Electronic Medical Reco...
Philips Healthcare Tasy Electronic Medical Record (EMR) SQL Injection Vulnerability
Philips Healthcare Tasy Electronic Medical Record EMR is a comprehensive healthcare informatics solution that addresses all areas of the healthcare environment, connecting the dots between clinical and non-clinical areas of the healthcare continuum. philips Healthcare Tasy Electronic Medical Reco...
CVE-2021-39375
Philips Healthcare Tasy Electronic Medical Record EMR 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter...
CVE-2021-39376
Philips Healthcare Tasy Electronic Medical Record EMR 3.06 allows SQL injection via the CorCadF2/executaConsultaEspecifico IECORPOASSIST or CDUSUARIOCONVENIO parameter...
