85 matches found
CVE-2019-15934
Intesync Solismed 3.3sp has CSRF...
CVE-2019-15933
Intesync Solismed 3.3sp has SQL Injection...
CVE-2019-15933
CVE-2019-15933 affects Intesync Solismed 3.3sp. Public records in multiple feeds describe a SQL injection vulnerability in the application (vulnerable component not explicitly enumerated beyond the product). The CVSS data provided indicates high to critical impact with network access and no authe...
CVE-2019-15932
CVE-2019-15932 affects Intesync Solismed 3.3sp with an improper access control vulnerability. Public sources in CNVD/Red Hat/NVD describe an access control error that could allow information disclosure and privilege elevation. The NVD CVSS metrics indicate high impact (C/I/A High) with network ac...
CVE-2019-15932
Intesync Solismed 3.3sp has Incorrect Access Control...
CVE-2019-15931
CVE-2019-15931 affects Intesync Solismed 3.3sp and is described as a Directory Traversal vulnerability. The available connected documents identify the affected product and vulnerability class but do not provide a detailed root-cause beyond path-handling issues, nor a remediation. NVD metrics for ...
CVE-2019-15931
Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246...
CVE-2019-15930
Intesync Solismed 3.3sp allows Clickjacking...
CVE-2019-15930
CVE-2019-15930: Intesync Solismed 3.3sp is affected by a clickjacking vulnerability. Multiple connected sources describe that an attacker could exploit this flaw to hijack user clicks and perform arbitrary actions on behalf of the user within Solismed. The Red Hat/CNVD/NVD entries corroborate the...
CVE-2019-15932: Missing Authentication for Critical Function
Intesync Solismed 3.3sp has Incorrect Access Control...
CVE-2019-15930: Improper Restriction of Rendered UI Layers or Frames
Intesync Solismed 3.3sp allows Clickjacking...
PT-2019-14478
Name of the Vulnerable Software and Affected Versions Intesync Solismed version 3.3sp Description The issue is related to SQL Injection. Recommendations For Intesync Solismed version 3.3sp, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2019-14481
Name of the Vulnerable Software and Affected Versions Intesync Solismed version 3.3sp Description The issue allows for Insecure File Upload. Recommendations For version 3.3sp, update to a version that addresses the Insecure File Upload issue, however at the moment, there is no information about a...
PT-2019-14475
Name of the Vulnerable Software and Affected Versions Intesync Solismed version 3.3sp Description The issue allows Clickjacking, which is a technique used to trick users into clicking on something different from what they perceive. Recommendations For version 3.3sp, consider implementing frame...
PT-2019-15149
Name of the Vulnerable Software and Affected Versions Intesync Solismed version 3.3sp1 Description A flaw in the encryption implementation allows for all encrypted data stored within the database to be decrypted. Recommendations For Intesync Solismed version 3.3sp1, consider re-encrypting the dat...
CVE-2019-17428: Use of a Broken or Risky Cryptographic Algorithm
An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted...
PT-2019-14480 · Intesync · Intesync Solismed
Name of the Vulnerable Software and Affected Versions: Intesync Solismed version 3.3sp Description: The issue is related to cross-site scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...
CVE-2019-15931: Improper Limitation of a Pathname to a Restricted Directory
Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246...
PT-2019-14596
Name of the Vulnerable Software and Affected Versions Intesync Solismed version 3.3sp1 Description The issue allows for Local File Inclusion LFI, leading to unauthenticated code execution. Recommendations For Intesync Solismed version 3.3sp1, at the moment, there is no information about a newer...
PT-2019-14476
Name of the Vulnerable Software and Affected Versions Intesync Solismed version 3.3sp Description The issue allows Directory Traversal. Recommendations For version 3.3sp, at the moment, there is no information about a newer version that contains a fix for this issue...