OpenEMR SQL Injection Vulnerability (CNVD-2018-17198)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...

OpenEMR OS Command Injection Vulnerability (CNVD-2018-18133)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An OS command injection vulnerability exists in OpenEMR versions prior to...

OpenEMR OS Command Injection Vulnerability (CNVD-2018-18135)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An OS command injection vulnerability exists in OpenEMR versions prior to...

OpenEMR OS Command Injection Vulnerability (CNVD-2018-18134)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 5.0.1.4. A...

Microsoft Windows PDF Remote Code Execution Vulnerability (CNVD-2018-17083)

Microsoft Windows 10 is a series of operating systems released by Microsoft.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server Version 1709 is a set of server operating systems.Windows PDF Library is one of the PDF libraries. Library is one of the PDF library...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2018-18004)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. A remote code executio...

QNAP QTS Helpdesk Command Injection Vulnerability

QNAP QTS is a Turbo NAS operating system from QNAP Systems that provides file storage management, backup, multimedia applications and security monitoring. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. Helpdesk is one of the helpdesk...

OpenEMR SQL Injection Vulnerability (CNVD-2019-10145)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in portal/addediteventuser.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by a remote attacker to execute arbitrary SQL commands via the eid,...

cgit 1.2.1 - Directory Traversal (Metasploit)

cgit 1.2.1 - Directory Traversal Metasploit Title: cgit 1.2.1 - Directory Traversal Metasploit Author: Dhiraj Mishra Software: cgit Link: https://git.zx2c4.com/cgit/ Date: 2018-08-14 CVE: CVE-2018-14912 This module exploits a directory traversal vulnerability which exists in cgit 'cgit Directory...

CVE-2018-15145

Multiple SQL injection vulnerabilities in portal/addediteventuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 eid, 2 userid, or 3 pid parameter...

CVE-2018-0714

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application...

CVE-2018-15139

Unrestricted file upload in interface/super/managesitefiles.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory. Recent...

CVE-2018-14939

The getapppath function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD libc, which might allow attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impac...

MathJax Cross-Site Scripting Vulnerability

MathJax is an open source JavaScript display engine . A cross-site scripting vulnerability exists in the \unicode macro in MathJax versions prior to 2.7.4. A remote attacker can exploit this vulnerability to execute untrusted Javascript code in a web browser...

Serve DLL via webdav server

This module simplifies the rundll32.exe Application Whitelisting Bypass technique. The module creates a webdav server that hosts a dll file. When the user types the provided rundll32 command on a system, rundll32 will load the dll remotly and execute the provided export function. The export...

CVE-2018-11455

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4, Automation License Manager 6 All versions 6.0.1. A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality,...

JVN#83701666: Multiple vulnerabilities in multiple I-O DATA network camera products

Multiple network camera products provided by I-O DATA DEVICE, INC. contain multiple vulnerabilities listed below. Permissions, Privileges, and Access Controls CWE-264 - CVE-2018-0661 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 6.3 CVSS v2|...

CVE-2017-8968

A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 hprest-1.5-79.x8664.rpm, ilorest-2.0-403.x8664.rpm. The issue is resolved in iLOREST v2.1 or subsequent versions...

CVE-2016-4398

A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i NNMi Software 10.00, 10.01 patch1, 10.01 patch 2, 10.10 using Java Deserialization...

CVE-2017-8968

A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 hprest-1.5-79.x8664.rpm, ilorest-2.0-403.x8664.rpm. The issue is resolved in iLOREST v2.1 or subsequent versions...