Lucene search
K

7 matches found

OSV
OSV
added 2026/04/13 9:52 p.m.1 views

PSF-0000-CVE-2026-4786

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

7CVSS5.8AI score0.00021EPSS
Exploits0References3
OSV
OSV
added 2026/04/13 9:52 p.m.1 views

PSF-2026-17

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

7CVSS5.8AI score0.00021EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/02/05 3:3 a.m.7 views

CVE-2024-6515

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

9.6CVSS8AI score0.002EPSS
Exploits0References1
OSV
OSV
added 2024/12/05 1:15 p.m.1 views

CVE-2024-6515

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

8.1CVSS5.8AI score0.002EPSS
Exploits0References1
NVD
NVD
added 2019/06/13 9:29 p.m.11 views

CVE-2019-10962

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and...

5.3CVSS5.3AI score0.0015EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/06/13 8:3 p.m.14 views

CVE-2019-10962

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and...

5.3AI score0.0015EPSS
Exploits0References2
ThreatPost
ThreatPost
added 2019/06/13 6:41 p.m.171 views

Max-Severity Bug in Infusion Pump Gateway Puts Lives at Risk

Researchers have disclosed two separate vulnerabilities within the Becton Dickinson Alaris Gateway Workstation for medical infusion pumps in hospitals, one carrying a critical rating of 10 out of 10 on the CVSS v.3 severity scale. Alaris Gateway Workstations power, monitor and control infusion...

7.5CVSS0.00923EPSS
Exploits0References8
Rows per page
Query Builder