Vulnerabilities > Cerner

DATE CVE VULNERABILITY TITLE RISK
2021-08-24 CVE-2021-36385 SQL Injection vulnerability in Cerner Mobile Care 5.0.0
A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Apostrophe (aka U+FF07) in the default.aspx User ID field.
network
low complexity
cerner CWE-89
critical
9.8
2020-04-29 CVE-2020-11677 Classic Buffer Overflow vulnerability in Cerner Medico 26.00
Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).
low complexity
cerner CWE-120
8.8
2020-04-29 CVE-2020-11676 Classic Buffer Overflow vulnerability in Cerner Medico 26.00
Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).
low complexity
cerner CWE-120
8.8
2020-04-29 CVE-2020-11675 Classic Buffer Overflow vulnerability in Cerner Medico 26.00
Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).
low complexity
cerner CWE-120
8.8
2020-04-29 CVE-2020-11674 Unspecified vulnerability in Cerner Medico 26.00
Cerner medico 26.00 allows variable reuse, possibly causing data corruption.
low complexity
cerner
8.8
2019-04-25 CVE-2018-20053 Unspecified vulnerability in Cerner Connectivity Engine 4 Firmware
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices.
network
low complexity
cerner
critical
9.8
2019-04-25 CVE-2018-20052 Insecure Default Initialization of Resource vulnerability in Cerner Connectivity Engine 4 Firmware
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices.
local
low complexity
cerner CWE-1188
7.8