1881 matches found
Dompdf before v2.0.0 vulnerable to chroot check bypass
Dompdf prior to version 2.0.0 is vulnerable to a chroot check bypass, which could cause disclosure of png and jpeg files...
Dompdf 安全漏洞
Dompdf is an HTML to PDF converter. A security vulnerability exists in Dompdf versions prior to 2.0.0, which originates from an externally controlled filename or path...
CVE-2021-46822 affecting package libjpeg-turbo 2.0.0-7
CVE-2021-46822 affecting package libjpeg-turbo 2.0.0-7. An upgraded version of the package is available that resolves this issue...
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to an issue in OPM and Golang Go packages (CVE-2020-15257, CVE-2021-21334 and CVE-2021-41771)
Summary IBM MQ Operator catalog container image is vulnerable to an issue in OPM package from Red Hat openshift4/ose-operator-registry and IBM MQ Operator, IBM Supplied Queue Manager container images are vulnerable to an issue in the Golang Go packages. CVE-2020-15257, CVE-2021-21334 and...
MAL-2022-2008 Malicious code in colors-2.0.0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d64356fbcf5a24d2fd862c639641636b14e4775d1040d0a9f5556c70c8c5797 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
LibreHealth EHR Cross-Site Scripting Vulnerability (CNVD-2022-62205)
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare settings. version 2.0.0 of LibreHealth EHR is vulnerable to a cross-site scripting vulnerability that originates in the...
CVE-2022-31496
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/managesitefiles.php access...
Input validation
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/managesitefiles.php access...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
Cross site scripting
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
LibreHealth EHR Cross-Site Scripting Vulnerability (CNVD-2022-65033)
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare settings. a cross-site scripting vulnerability exists in LibreHealth EHR Base version 2.0.0. The vulnerability stems from a...
PT-2022-20764 · Unknown · Librehealth Ehr Base
Name of the Vulnerable Software and Affected Versions: LibreHealth EHR Base version 2.0.0 Description: The issue allows for incorrect access to the interface/super/manage site files.php. The estimated number of potentially affected devices worldwide is not available. There is no information about...
CVE-2021-35531 Remote Code Execution in TXpert Hub CoreTec 4
Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects:...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
PT-2022-10468 · Hitachi Energy · Hitachi Energy Txpert Hub Coretec 4
Name of the Vulnerable Software and Affected Versions: Hitachi Energy TXpert Hub CoreTec 4 versions 2.0.0 through 2.2.1 Description: A vulnerability exists in the file upload validation part of the Hitachi Energy TXpert Hub CoreTec 4 product. This issue allows an attacker or malicious agent who...
CVE-2022-31494
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...
Cross site scripting
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...
CVE-2022-31494
CVE-2022-31494 affects LibreHealth EHR Base 2.0.0 where the gacl/admin/acl_admin.php page’s action parameter is vulnerable to cross-site scripting (XSS). The issue is described across multiple sources (Red Hat, CNVD, OSV, CVE listings) as a stored/ reflexive XSS condition in this parameter. The a...