Lucene search
+L

2160 matches found

CVE
CVE
added 2023/05/27 12:0 a.m.108 views

CVE-2023-2945

CVE-2023-2945 affects OpenEMR versions prior to 7.0.1, where a missing authorization flaw in the openemr/openemr repository can allow unauthorized actions. Public disclosures across NVD/Red Hat/OSV list the issue as missing authorization; Huntr notes potential exploitation via impersonation of hi...

5.4CVSS4.9AI score0.0043EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/05/27 12:0 a.m.37 views

CVE-2023-2942 Improper Input Validation in openemr/openemr

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...

8.1CVSS8.4AI score0.00795EPSS
SaveExploits1References2
CNVD
CNVD
added 2023/05/17 12:0 a.m.55 views

OpenEMR Access Control Error Vulnerability (CNVD-2023-40910)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in OpenEMR versions prior to 7.0.1,...

8.8CVSS6.6AI score0.0061EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/12 8:15 a.m.18 views

CVE-2023-2674

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

8.8CVSS5.7AI score0.0061EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/12 8:15 a.m.18 views

Improper access control

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

6.5CVSS4.6AI score0.0061EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/05/12 12:0 a.m.8 views

OpenEMR 访问控制错误漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in OpenEMR versions prior to 7.0.1,...

8.8CVSS6.7AI score0.0061EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/05/12 12:0 a.m.8 views

PT-2023-5357 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to improper access control in the OpenEMR software, which can be exploited by a remote attacker to disrupt the application's logic. Recommendations: For versions prior to 7.0.1...

9CVSS6AI score0.0061EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2023/05/12 12:0 a.m.29 views

CVE-2023-2674 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

8.8CVSS5.4AI score0.0061EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/05/12 12:0 a.m.7 views

CVE-2023-2674 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

8.8CVSS6.8AI score0.0061EPSS
SaveExploits1References2
CVE
CVE
added 2023/05/12 12:0 a.m.56 views

CVE-2023-2674

CVE-2023-2674 describes an improper access control vulnerability in OpenEMR before version 7.0.1. Connected sources corroborate that a front-end OpenEMR user could gain authorization to perform restricted actions (e.g., adding a Pharmacy) due to weak access controls in the application’s practice/...

8.8CVSS5AI score0.0061EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/05/12 12:0 a.m.18 views

CVE-2023-2674 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

8.8CVSS6.8AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/05/10 12:0 a.m.14 views

OpenEMR < 7.0.1 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

8.8CVSS6.1AI score0.96731EPSS
SaveExploits11References10
CNVD
CNVD
added 2023/05/10 12:0 a.m.45 views

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2023-40913)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 7.0.1...

7.5CVSS6.2AI score0.00526EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/08 5:15 a.m.22 views

CVE-2023-2566

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

7.5CVSS5.6AI score0.00526EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/08 5:15 a.m.22 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

5.4CVSS4.9AI score0.00526EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/05/08 12:0 a.m.26 views

CVE-2023-2566 Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

7.5CVSS5.5AI score0.00526EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/05/08 12:0 a.m.6 views

OpenEMR 跨站脚本漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 7.0.1...

7.5CVSS5.9AI score0.00526EPSS
SaveExploits1References3
CVE
CVE
added 2023/05/08 12:0 a.m.141 views

CVE-2023-2566

OpenEMR CVE-2023-2566 is a stored XSS vulnerability affecting OpenEMR prior to version 7.0.1. Public sources describe the issue as arising from insufficient input filtering/escaping that allows injection of web payloads via user-supplied data in the web application. The vulnerability is categoriz...

7.5CVSS5.2AI score0.00526EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/08 12:0 a.m.10 views

CVE-2023-2566 Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

7.5CVSS4.9AI score0.00526EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/08 12:0 a.m.16 views

CVE-2023-2566 Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

7.5CVSS7AI score
SaveExploits0References4
Rows per page
Query Builder