112 matches found
hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055
HAPI FHIR - HL7 FHIR Core Artifacts CI Status master --- This is the java core object handling code, with utilities including validator, for the FHIR specification. included in this repo: org.fhir.fhir.utilities: Shared code used by all the other projects - including the internationalization code...
CVE-2026-44715 OpenMRS has Broken Access Control in HL7 Configuration
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level accounts. Versions...
CVE-2026-44715
OpenMRS , an open-source electronic medical record platform, is affected by a Broken Access Control vulnerability in its HL7 configuration. Prior to versions 1.23.0 and 2.10.0 , the administrative DWR method startHl7ArchiveMigration, which should be restricted to admin-level accounts, is accessib...
PT-2026-90502
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level accounts. Versions...
ROOT-APP-MAVEN-CVE-2026-55470 CVE-2026-55470 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root
Root has patched CVE-2026-55470 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...
Insufficiently Protected Credentials
Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials through and exposed /loadIG endpoint in ca.uhn.hapi.fhir:org.hl7.fhir.validation. An attacker can obtain authentication credentials for external FHIR servers by submitting a crafted URL that exploits...
CVE-2026-34360
creationtimestamp| type| source ---|---|--- 2026-03-27 13:33:36+00:00| published-proof-of-concept| https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-3ww8-jw56-9f5h...
CVE-2025-58080
Summary: The CVE-2025-58080 vulnerability affects MedDream PACS Premium 7.3.6.870 and is a post-auth, reflected cross-site scripting (XSS) in the modifyHL7App.php path. The issue arises because the attacker-controlled value of the name parameter is written into HTML output without sanitization, e...
CVE-2025-53854
A reflected cross-site scripting xss vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-53854
A reflected cross-site scripting xss vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
MedDream PACS Premium modifyHL7Route reflected cross-site scripting (XSS) vulnerability
Talos Vulnerability Report TALOS-2025-2265 MedDream PACS Premium modifyHL7Route reflected cross-site scripting XSS vulnerability January 20, 2026 CVE Number CVE-2025-53854 SUMMARY A reflected cross-site scripting xss vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premiu...
EUVD-2014-5339
Malware in sbrugna...
EUVD-2020-19773
Malware in sbrugna...
EUVD-2014-3798
Malware in sbrugna...
EUVD-2014-3799
Malware in sbrugna...
EUVD-2025-0136
Malicious code in bioql PyPI...
EUVD-2024-2732
Malicious code in bioql PyPI...
EUVD-2025-0146
Malicious code in bioql PyPI...