CVE-2022-31496

CVE-2022-31496 affects LibreHealth EHR Base 2.0.0. A misconfigured access control on the interface/super/manage_site_files.php endpoint allows unauthorized access, with sources noting possible remote code execution in some catalogs. The available documents do not specify a vendor-provided fix ver...

CVE-2021-31496

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

healthstream.com XSS vulnerability

Vulnerable URL: http://www.healthstream.com/content/ABMS/Demo/singleplay/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...