Cerner

CVE-2021-36385 Aug 24, 12:15 CRITICAL Act Now

A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Apostrophe (aka U+FF07) in the default.aspx User ID. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2020-11677 Apr 29, 14:15 HIGH POC This Week

Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-11676 Apr 29, 14:15 HIGH POC This Week

Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-11675 Apr 29, 14:15 HIGH POC This Week

Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-11674 Apr 29, 14:15 HIGH POC This Week

Cerner medico 26.00 allows variable reuse, possibly causing data corruption. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.