6716 matches found
CVE-2022-4567
CVE-2022-4567 impacts OpenEMR (openemr/openemr) before version 7.0.0.2, due to an improper access control flaw. Reported as an authenticated-access issue that lets a user bypass controls to reach or retrieve any document via crafted URLs (e.g., direct document access and related actions). Concret...
CVE-2022-4567 Improper Access Control in openemr/openemr
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4505
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4506
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4503
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4503 Cross-site Scripting (XSS) - Generic in openemr/openemr
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4504 Improper Input Validation in openemr/openemr
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4504 Improper Input Validation in openemr/openemr
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4446
PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...
CVE-2022-4446 PHP Remote File Inclusion in tsolucio/corebos
PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...
Improper Privilege Management in rdiffweb
Unauthorized access to settings update, logs , history, delete etc in GitHub repository ikus060/rdiffweb prior to 2.5.2...
CVE-2022-3520
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...
CVE-2022-4413
Cross-site Scripting XSS - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13...
CVE-2022-4407
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9...