EUVD-2018-8330

Malware in sbrugna...

EUVD-2021-30045

Malicious code in bioql PyPI...

Malicious code in open-banking-reference-application-australia-region (npm)

The package open-banking-reference-application-australia-region was found to contain malicious code...

CVE-2018-16521

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

Malware in open-banking-reference-application

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1076 Malicious code in open-banking-reference-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75747b956f1d359e555bc99c3edaf59e37fef0f5cd43e5db2318fbf35c25fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OpenMRS cross-site scripting vulnerability

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS openmrs-module-referenceapplication versions prior to 1.5.0, which originates from some unknown processing in the file...

PT-2022-11734 · Openmrs · Openmrs

Name of the Vulnerable Software and Affected Versions: OpenMRS openmrs-module-referenceapplication versions up to 2.11.x Description: A vulnerability was found in the function post of the file omod/src/main/java/org/openmrs/module/referenceapplication/page/controller/UserAppPageController.java of...

OpenMRS cross-site scripting vulnerability

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS openmrs-module-referenceapplication versions prior to 1.6.0, which originates from unknown code in file...

CVE-2021-43094

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition =2.11 and Platform Standalone Edition =2.4.0 via GET requests on arbitrary parameters in patient.page...

CVE-2021-43094

CVE-2021-43094 is an SQL Injection vulnerability in the OpenMRS Reference Application Standalone Edition (≤2.11) and Platform Standalone Edition (≤2.4.0) that is exploitable via GET requests on arbitrary parameters in the patient.page. The cited sources consistently describe a SQL injection vulne...

CVE-2021-43094: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition =2.11 and Platform Standalone Edition =2.4.0 via GET requests on arbitrary parameters in patient.page...

PT-2022-11778

Name of the Vulnerable Software and Affected Versions OpenMRS Reference Application Standalone Edition versions 2.11 and earlier OpenMRS Platform Standalone Edition versions 2.4.0 and earlier Description An SQL Injection issue exists via GET requests on arbitrary parameters in the patient.page...

CVE-2018-16521

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

CVE-2018-16521

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

CVE-2018-16521

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

CVE-2018-16521: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

PT-2018-13609

Name of the Vulnerable Software and Affected Versions OpenMRS Reference Application version 2.8.0 HTML Form Entry version 3.7.0 Description A vulnerability exists due to an XML External Entity XXE issue. This allows for potential exploitation. Recommendations For OpenMRS Reference Application...

CVE-2017-12796: Deserialization of Untrusted Data

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...

PT-2017-3194

Name of the Vulnerable Software and Affected Versions OpenMRS Reference Application versions prior to 2.6.1 Reporting Compatibility Add On versions prior to 2.0.4 Description The issue is related to the lack of authentication when deserializing XML input into ReportSchema objects. This allows...