Show filters
219 Total Results
Displaying 81-90 of 219
Sort by:
Attacker Value
Unknown
CVE-2022-35217
Disclosure Date: July 29, 2022 (last updated February 24, 2025)
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
0
Attacker Value
Unknown
CVE-2022-35219
Disclosure Date: July 29, 2022 (last updated February 24, 2025)
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
0
Attacker Value
Unknown
CVE-2022-21518
Disclosure Date: July 19, 2022 (last updated December 22, 2024)
Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface). Supported versions that are affected are 2.4.8.7 and 2.5.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
0
Attacker Value
Unknown
CVE-2021-45918
Disclosure Date: June 20, 2022 (last updated February 23, 2025)
NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.
0
Attacker Value
Unknown
CVE-2022-31496
Disclosure Date: June 09, 2022 (last updated February 23, 2025)
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
0
Attacker Value
Unknown
CVE-2022-31497
Disclosure Date: June 08, 2022 (last updated February 23, 2025)
LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
0
Attacker Value
Unknown
CVE-2022-31495
Disclosure Date: June 07, 2022 (last updated February 23, 2025)
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
0
Attacker Value
Unknown
CVE-2022-31494
Disclosure Date: June 06, 2022 (last updated February 23, 2025)
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
0
Attacker Value
Unknown
CVE-2022-31498
Disclosure Date: June 06, 2022 (last updated February 23, 2025)
LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
0
Attacker Value
Unknown
CVE-2022-31492
Disclosure Date: June 06, 2022 (last updated February 23, 2025)
Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.
0
