Archive
6 August 2021
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —
SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmont…
-
Unscored —
A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to c…
-
Unscored —
Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private information such as photos …
-
Unscored —
index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.
-
Unscored —
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.
-
Unscored —CVE-2021-38149 Public exploit
index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.
-
Unscored —
A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an at…
-
Medium 4.3
An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 …
-
Medium 4.6
Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer version…
-
High 7.5
OpenStack Keystone allows information disclosure during account locking
OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authentica…
-
Unscored —
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safe…
-
Unscored —
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/…