eClinicalWorks Patient Portal Cross-Site Scripting Vulnerability

eClinicalWorks PatientPortal is a product for healthcare applications from eClinicalWorks, Inc. that provides patients with a secure means of communicating to view their Personal Health Record PHR, view lab results, and more. A cross-site scripting vulnerability exists in the raceMasterList.jsp...

Khan Academy: SSL/TLS Vulnerability at khanacademy.org

CVE - 2011 - 3389 Description : The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle...

Timing Attacks

OpenSSL is vulnerable to timing attacks. The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2 doesn't check MAC addresses in constant time during the processing of a malformed CBC padding. This is also known as the "Lucky Thirteen" issue...

eClinicalWorks Patient Portal SQL Injection Vulnerability

eClinicalWorks Patient Portal is a product for healthcare applications from eClinicalWorks, Inc. that provides patients with a secure means of communicating to view their Personal Health Record PHR, view lab results, and more. An SQL injection vulnerability exists in the messageJson.jsp file in...

CVE-2016-6124

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

CVE-2016-8911

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attac...

UBUNTU-CVE-2016-8698

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703...

Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 13, 2014

Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 13, 2014 View products that this article applies to. Introduction This update is for the Microsoft .NET Framework to disable RC4 in Transpor...

UBUNTU-CVE-2016-9934

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...

VulnCheck KEV: CVE-2014-0569

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary...

UBUNTU-CVE-2016-5628

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: DML...

Oracle MySQL Server Component Remote Denial of Service Vulnerability (CNVD-2016-09888)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A remote denial of service vulnerability exists in the Server: InnoDB subcomponent of the MySQL Server componen...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2016-09777)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote security vulnerability exists in the Server: Performance Schema subcomponent of the MySQL Server component in Oracle...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09890)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Server: Performance Schema subcomponent of the MySQL Server component ...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09902)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Security: Audit subcomponent of the MySQL Server component in Oracle...

Oracle MySQL Server Component Denial of Service Vulnerability

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A remote security vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09891)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Server: RBR subcomponent of the MySQL Server component in Oracle MySQL...

Unspecified Vulnerability in Oracle MySQL Server Component (CNVD-2016-10078)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A remote security vulnerability exists in the Server: DML subcomponent of the MySQL Server component in Oracle...

PT-2016-6606 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.13 and earlier Description: The issue allows remote administrators to affect availability via vectors related to Server: Performance Schema. It is an easily exploitable vulnerability that can be compromised by a high...

PT-2016-6607 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.13 and earlier Description: The issue allows remote administrators to affect availability via vectors related to RBR. It is an easily exploitable vulnerability that can be compromised by a high privileged attacker wi...