Venere vulnerabilities and CVEs
Known vulnerabilities affecting Venere, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
11 vulnerabilities tracked.
- 9.2 Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums.
- 8.1 The shared AIS login routing selects a production-shipped test DAO and plaintext comparison for the H and V application codes, accepting…
- 8.0 The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or…
- 8.0 Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers,…
- 7.2 XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing…
- 6.3 A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate…
- 5.9 Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create…
- 5.9 Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with…
- 5.8 Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across…
- 5.8 Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect…
- 4.3 Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Venere is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Linux Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 macOS API Connect Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Chrome Red Hat Enterprise Linux 9.6 Extended Update Support Zephyr Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Enterprise Linux 7 Extended Lifecycle Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On iOS and iPadOS Windows Server 2022 Red Hat Hardened Images Windows 11 version 26H1 Windows 11 Version 24H2 Windows Server 2025 Windows Server 2025 (Server Core installation)