CVE-2026-124487

OpenEMR versions before 8.4.0 are affected by an improper authorization vulnerability (CWE-863) in the non-patient POST /fhir/DocumentReference/$docref route. This flaw allows low-privileged users, who only possess demographics and documents permissions, to generate and download the full-chart CC...

CVE-2026-JBrowse-Injection

CVE-2026-XXXXX: JBrowse Configuration Injection via URL Parame...

EUVD-2022-29618

Malicious code in bioql PyPI...

CVE-2022-24831

OpenClinica is an open source software for Electronic Data Capture EDC and Clinical Data Management CDM. Versions prior to 3.16.1 are vulnerable to SQL injection due to the use of string concatenation to create SQL queries instead of prepared statements. No known workarounds exist. This issue has...

Oracle Health Sciences Applications security vulnerabilities

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in Oracle Clinical Remote Data Capture version 5.4.0.2 for Oracle Health Sciences Applications. An attacker could exploit the...

Path traversal

OpenClinica is an open source software for Electronic Data Capture EDC and Clinical Data Management CDM. OpenClinica prior to version 3.16 is vulnerable to path traversal in multiple endpoints, leading to arbitrary file read/write, and potential remote code execution. There are no known...

CVE-2022-24830 Path Traversal in OpenClinica

OpenClinica is an open source software for Electronic Data Capture EDC and Clinical Data Management CDM. OpenClinica prior to version 3.16 is vulnerable to path traversal in multiple endpoints, leading to arbitrary file read/write, and potential remote code execution. There are no known...