PT-2017-6766

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue is related to an SQL injection vulnerability in the portalUserService.jsp file. This vulnerability allows remote authenticated users to inject arbitrar...

PT-2017-6767

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue is related to a cross-site request forgery CSRF vulnerability. This vulnerability is located in the portalUserService.jsp file and can be exploited by...

FreeBSD bhyve(8) Integer Overflow Vulnerability

bhyve, the FreeBSD hypervisor/virtual machine manager, reports the "POPCNT" POPulation Count processor feature in bhyve8. An integer overflow vulnerability exists in FreeBSD bhyve8. As the bhyve8 virtual machine is configured with more than 3GB of client memory, this could allow a malicious clien...

SUSE-SU-2016:2570-1 Security update for samba

This update for samba provides the following fix: Following security issue was fixed: - CVE-2016-2119: Prevent client-side SMB2 signing downgrade. bsc986869 Also the following bugs were fixed: - Fix possible ctdb crash when opening sockets with htonsIPPROTORAW. bsc969522 - Honor smb.conf socket...

census.sltidc.lk XSS vulnerability

Open Bug Bounty ID: OBB-159554 Description| Value ---|--- Affected Website:| census.sltidc.lk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

EClinicalWorks Population Health (CCMR) Client Portal Session Fixation Vulnerability

EClinicalWorks Population Health a.k.a. eClinicalWorks CCMR is a suite of population health solutions from EClinicalWorks, Inc. in the U.S. Client Portal is one of the portals. A session fixation vulnerability exists in the EClinicalWorks Population Health Client Portal that can be exploited by a...

EClinicalWorks Population Health Client Portal Cross-Site Request Forgery Vulnerability

EClinicalWorks Population Health is a suite of population health solutions from EClinicalWorks, Inc. that provides dashboard analytics, patient appointment scheduling, care planning, and a secure network for patient referrals, among other features.Client Portal is one of these portals. A cross-si...

EClinicalWorks Population Health Client Portal SQL Injection Vulnerability

EClinicalWorks Population Health is a suite of population health solutions from EClinicalWorks, Inc. that provides dashboard analytics, patient appointment scheduling, care planning, and a secure network for patient referrals, among other features.Client Portal is one of these portals. SQL...

EClinicalWorks Population Health Client Portal Cross-Site Scripting Vulnerability

EClinicalWorks Population Health is a suite of population health solutions from EClinicalWorks, Inc. that provides dashboard analytics, patient appointment scheduling, care planning, and a secure network for patient referrals, among other features.Client Portal is one of these portals. A cross-si...

eClinicalWorks (CCMR) - Multiple Vulnerabilities

Title: eClinicalWorks CCMR - Multiple Vulnerabilities Vendor: https://www.eclinicalworks.com Product: eClinicalWorks Population Health CCMR Client Portal Software URL: https://www.eclinicalworks.com/products-services/population-health-ccmr/ Credit: Jerold Hoong -----------------------------------...

Lt Gen David Deptula on Desert Storm and Islamic State

This weekend Vago Muradian interviewed Lt Gen ret David Deptula, most famous for his involvement as a key planner for the Desert Storm air campaign. I recommend watching the entire video, which is less than 8 minutes long. Three aspects caught my attention. I will share them here. First, Lt Gen...

April 911 Outage Impacted 3.5 Percent of U.S. Population

In the early hours of April 10, a series of errors led to a massive, multi-state outage in the emergency call management centers ECMCs that handle 911 calls in seven geographically dispersed states. The incident originated at an obscure but critical call routing hub in Englewood, Colo., and ended...

openSUSE Security Update : - Update to version neutron-2013.2.4.dev84.gbe0c1d1 (openSUSE-SU-2014:1051-1)

Update to version neutron-2013.2.4.dev84.gbe0c1d1 : - Fix getvifportbyid to only return relevant ports - Update to version neutron-2013.2.4.dev82.gd1a9a9d : - LBaaS add missing rootwrap filter for route - NVP plugin:fix delete sec group when backend is out of sync - Kill 'Skipping unknown group...

NASA website Hacked; Protest by Hackers against US action on Syria and Brazil Spying

Earlier reports based on Snowden's documents revealed the existence of the NSA's PRISM program, and indicate that the National Security Agency spied on Brazilians. On other End, President Obama said that the Syrian government used chemical weapons on its citizens and The United States may have to...

Infographic: Facebook Security In A Nutshell

As Facebook’s population has grown from thousands to millions to hundreds of millions, security has come to be an even greater concern. In recent years, the company has had to respond to threats ranging from spam to Facebook-specific malware like Koobface, all the while keeping scammers and...

Massive Data Breach of South Korea Portal Affects 35 Million Users

A major provider of Internet services and mobile access in South Korea has been hit by one of the larger data breaches in recent history, resulting in the compromise of personal information belonging to as many as 35 million users. The attack on SK Telecom’s Cyworld site reportedly came from an I...

Real World Security – Larry Whiteside Interview

Like every other security executive in the health care industry, Larry Whiteside, CISO of the Visiting Nurse Service of New York, spends much of his time dealing with compliance-related issues. But the distributed nature of his user population means that he has sensitive patient data on thousands...

Fedora Core 11 FEDORA-2009-8507 (viewvc)

The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8507. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

[NT] SurgeLDAP Web Service user.cgi File Retrieval

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...