Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-118458 1 Compugroup Medical 2 Phronesis, Venere 2026-11-09 N/A
The shared AIS login routing selects a production-shipped test DAO and plaintext comparison for the H and V application codes, accepting fixed administrator accounts.
CVE-2026-118459 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials.
CVE-2026-118460 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unauthorized practitioner token requests.
CVE-2026-118461 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials.
CVE-2026-118462 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.
CVE-2026-118464 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields.
CVE-2026-118465 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations.
CVE-2026-118467 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection.
CVE-2026-118468 1 Compugroup Medical 4 Infantia, Phronesis, Profim and 1 more 2026-11-09 N/A
XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity (XXE) attacks.