13117 matches found
Default credentials
GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors...
Hardcoded credentials
GE Healthcare Discovery XR656 and XR656 G2 has a password of 1 2getin for the insite user, 2 4$xray for the xruser user, and 3 superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another...
CVE-2012-6693
GE Healthcare Centricity PACS 4.0 Server has a default password of 1 nasro for the nasro ReadOnly user and 2 nasrw for the nasrw Read/Write user, which has unspecified impact and attack vectors...
CVE-2001-1594
GE Healthcare eNTEGRA P&R has a password of 1 entegra for the entegra user, 2 passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, 3 0 for the entegra user of the Codonics printer FTP service, 4 eNTEGRA for the eNTEGRA P&R user account, 5 insite for the WinVNC Login, and...
CVE-2010-5310
The Acquisition Workstation for the GE Healthcare Revolution XQ/i has a password of adw3.1 for the sdc user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...
CVE-2003-1603
GE Healthcare Discovery VH has a default password of 1 interfile for the ftpclient user of the Interfile server or 2 "2" for the LOCAL user of the FTP server for the Codonics printer, which has unspecified impact and attack vectors...
CVE-2012-6660
GE Healthcare Precision MP/i is affected by a vulnerability (CVE-2012-6660) due to default or hard-coded credentials for multiple accounts: serviceapp uses the orion password, clinical operator uses orion, and administrator uses PlatinumOne. The ICS advisory (GE Healthcare vulnerability) confirms...
CVE-2009-5143
GE Healthcare Discovery 530C has a password of bigguy1 for the 1 acqservice user and 2 wsservice user of the Xeleris System, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires ...
CVE-2014-7233
GE Healthcare Precision THUNIS-800+ has a default password of 1 1973 for the factory default System Utilities menu, 2 TH8740 for installation using TH8740122Setup.exe, 3 hrml for "Setup and Activation" using DSASetup, and 4 an empty string for Shutter Configuration, which has unspecified impact a...
Code injection
Webservice-DIC yoyakuv41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors...
CVE-2015-2977
Webservice-DIC yoyakuv41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors...
CVE-2015-2979
Webservice-DIC yoyakuv41 allows remote attackers to execute arbitrary OS commands via unspecified vectors...
JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment...
JDK: unspecified vulnerability fixed in 7u85 and 8u51 (2D)
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D...
HP System Management Homepage Cross-Site Request Forgery Vulnerability
HP System Management Homepage is a Web-based interface released by Hewlett-Packard HP. The interface consolidates and simplifies the single system management process SMH for HP servers running HP-UX, Linux and Microsoft Windows operating systems. A cross-site request forgery vulnerability exists ...
JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D...
ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
Medium: kernel
Issue Overview: It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O...
