📦 Biodose\/nmis

This vulnerability in NMIS/BioDose V22.02 and earlier allows attackers with database access to execute arbitrary code through SQL Server stored procedures due to excessive default privileges. Systems ...

This vulnerability exposes SQL Server database and configuration files through insecure Windows share permissions in NMIS/BioDose networked installations. Attackers can access sensitive data including...

NMIS/BioDose V22.02 and earlier versions have insecure default file permissions in their installation directories. This allows client workstation users to modify program executables and libraries, pot...

NMIS/BioDose software versions V22.02 and earlier contain hard-coded plain text passwords in executable binaries, allowing attackers to bypass authentication and gain unauthorized access to both the a...

This vulnerability allows attackers to bypass the NMIS/BioDose application's authentication by directly accessing the SQL Server database using a shared database account. All organizations running NMI...