共收录 64179 条相关情报。
← 返回所有主题CVE-2025-58403
CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data.
CVE-2025-30054
CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with roo
CVE-2025-30053
The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.
CVE-2025-30052
The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based s
CVE-2025-30051
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials,
CVE-2025-30050
CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified
CVE-2025-30049
The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 a
CVE-2025-30047
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an H
CVE-2025-30046
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run w
CVE-2025-30045
CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF documen
CVE-2025-30043
CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is ac
CVE-2026-93489
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge a
CVE-2026-75779
Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forger
CVE-2026-75775
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute
CVE-2026-63244
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthe
CVE-2026-4952
The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to
CVE-2026-4951
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for emplo
CVE-2026-4950
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the emplo
CVE-2026-63243
An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could
CVE-2026-55981
A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate fi