Lucene search
+L

7 matches found

CNVD
CNVD
•added 2017/11/03 12:00 a.m.•15 views

Thornberry Ndoc Information Disclosure Vulnerability

Thornberry Ndoc is a home care management software from Thornberry USA. The software supports features such as storing and importing medical records, online assessments, and creating medical orders. A security vulnerability exists in versions of Thornberry Ndoc prior to 8.0 that stems from the...

10CVSS7AI score0.01412EPSS
SaveExploits0References1
Prion
Prion
•added 2017/10/26 8:29 p.m.•23 views

Default credentials

Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...

10CVSS9.3AI score0.01412EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2017/10/26 8:29 p.m.•15 views

CVE-2017-15366

Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...

9.8CVSS5.8AI score0.01412EPSS
SaveExploits0References1
NVD
NVD
•added 2017/10/26 8:29 p.m.•23 views

CVE-2017-15366

Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...

10CVSS9.5AI score0.01412EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/10/26 8:00 p.m.•31 views

CVE-2017-15366

Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...

9.5AI score0.01412EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/26 12:00 a.m.•3 views

CVE-2017-15366: Insertion of Sensitive Information into Log File

Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...

10CVSS8.1AI score0.01412EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/10/26 12:00 a.m.•3 views

PT-2017-14025

Name of the Vulnerable Software and Affected Versions Thornberry NDoc versions prior to 8.0 Description The issue concerns a default database user password that is stored in cleartext in a log file during client installation on laptops. This password can be used to gain full admin or system acces...

10CVSS0.01412EPSS
SaveExploits0References3
Rows per page
Query Builder