151 matches found
CVE-2026-25135 OpenEMR's location resource for Group.$export operation returns entire patient/user population contact information
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 have an information disclosure vulnerability that leaks the entire contact information for all users, organizations, and patients in the system to anyone who has the...
CVE-2026-24849
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the disposeDocument method in EtherFaxActions.php allows authenticated users to read arbitrary files from the server filesystem. Any authenticated user regardless of...
CVE-2026-24849 OpenEMR Arbitrary File Read Vulnerability
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the disposeDocument method in EtherFaxActions.php allows authenticated users to read arbitrary files from the server filesystem. Any authenticated user regardless of...
CVE-2025-67491
OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The variable $data is passed in a click event handler enclosed in...
PT-2026-21824
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 7.0.4 Description OpenEMR is an open source electronic health records and medical practice management application. Prior to version 7.0.4, the disposeDocument method in EtherFaxActions.php allows authenticated users t...
OpenEMR 访问控制错误漏洞
OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Prior to OpenEMR 8.0.0, there was an access control...
OpenEMR 安全漏洞
OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0 contained security...
CVE-2025-54373
OpenEMR (open source EHR/PM) versions prior to 7.0.4 contain a data exposure vulnerability where contents of Clinical Notes and Care Plans with Sensitivity=high could be viewed and changed by users lacking high-sensitivity privileges. The issue is fixed in 7.0.4 (per CVE descriptions and Red Hat/...
CVE-2025-54373 OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Clinical Notes and Care Plan, where an encounter has...
CVE-2021-47817
OpenEMR 5.0.2.1 has a cross-site scripting vulnerability that allows authenticated attackers to inject JavaScript via user profile parameters. The underlying issue enables an attacker to craft a payload to download and run a web shell, leading to remote command execution on the vulnerable OpenEMR...
CVE-2019-16862
Reflected XSS in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter...
EUVD-2020-5816
Malware in sbrugna...
EUVD-2019-17761
Malware in sbrugna...
EUVD-2021-12789
Malware in sbrugna...
EUVD-2021-12788
Malware in sbrugna...
EUVD-2018-8954
Malware in sbrugna...
EUVD-2018-9774
Malware in sbrugna...
EUVD-2018-7035
Malware in sbrugna...