Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: drEryk Clear all filters
TI-2026-14182 CVE-2026-17038 · GHSA-4qc3-v5c2-6x2v

Use of Hard-coded Credentials in drEryk Gabinet

Priority LOW 37

DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2026-09-10 Fixed in 11.5.0 CWE-798
TI-2024-03450 CVE-2024-3699 · GHSA-j37r-fj8f-2g89

Hardcoded password in drEryk Gabinet

Priority MEDIUM 42

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database.

CVSS 4.0CRITICAL 9.3 Local No auth No interaction EPSS 0.00409 Published 2024-06-10 No fix listed CWE-259