18 matches found
EUVD-2018-8330
Malware in sbrugna...
EUVD-2021-30045
Malicious code in bioql PyPI...
Malicious code in open-banking-reference-application-australia-region (npm)
The package open-banking-reference-application-australia-region was found to contain malicious code...
CVE-2018-16521
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
MAL-2024-1076 Malicious code in open-banking-reference-application (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75747b956f1d359e555bc99c3edaf59e37fef0f5cd43e5db2318fbf35c25fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OpenMRS 跨站脚本漏洞
OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS openmrs-module-referenceapplication versions prior to 1.5.0, which originates from some unknown processing in the file...
PT-2022-11734 · Openmrs · Openmrs
Name of the Vulnerable Software and Affected Versions: OpenMRS openmrs-module-referenceapplication versions up to 2.11.x Description: A vulnerability was found in the function post of the file omod/src/main/java/org/openmrs/module/referenceapplication/page/controller/UserAppPageController.java of...
OpenMRS 跨站脚本漏洞
OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS openmrs-module-referenceapplication versions prior to 1.6.0, which originates from unknown code in file...
CVE-2021-43094
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition =2.11 and Platform Standalone Edition =2.4.0 via GET requests on arbitrary parameters in patient.page...
CVE-2021-43094
CVE-2021-43094 is an SQL Injection vulnerability in the OpenMRS Reference Application Standalone Edition (≤2.11) and Platform Standalone Edition (≤2.4.0) that is exploitable via GET requests on arbitrary parameters in the patient.page. The cited sources consistently describe a SQL injection vulne...
CVE-2021-43094: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition =2.11 and Platform Standalone Edition =2.4.0 via GET requests on arbitrary parameters in patient.page...
CVE-2018-16521
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
CVE-2018-16521
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
CVE-2018-16521: Improper Restriction of XML External Entity Reference
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
CVE-2017-12796: Deserialization of Untrusted Data
The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...
OpenMRS 2.3 (1.11.4) - Expression Language Injection Vulnerability
Exploit for php platform in category web applications OpenMRS 2.3 1.11.4 Expression Language Injection Vulnerability Vendor: OpenMRS Inc. Product web page: http://www.openmrs.org Affected version: OpenMRS 2.3, 2.2, 2.1, 2.0 Platform 1.11.4 Build 6ebcaf, 1.11.2 and 1.10.0 OpenMRS-TB System OpenMRS...
OpenMRS 2.3 (1.11.4) - Expression Language Injection
OpenMRS 2.3 1.11.4 Expression Language Injection Vulnerability Vendor: OpenMRS Inc. Product web page: http://www.openmrs.org Affected version: OpenMRS 2.3, 2.2, 2.1, 2.0 Platform 1.11.4 Build 6ebcaf, 1.11.2 and 1.10.0 OpenMRS-TB System OpenMRS 1.9.7 Build 60bd9b Summary: OpenMRS is an application...
OpenMRS 2.3 (1.11.4) Expression Language Injection
OpenMRS 2.3 1.11.4 Expression Language Injection Vulnerability Vendor: OpenMRS Inc. Product web page: http://www.openmrs.org Affected version: OpenMRS 2.3, 2.2, 2.1, 2.0 Platform 1.11.4 Build 6ebcaf, 1.11.2 and 1.10.0 OpenMRS-TB System OpenMRS 1.9.7 Build 60bd9b Summary: OpenMRS is an application...