Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (143 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-2730 1 Open-emr 1 Openemr 2024-11-21 6.5 Medium
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2729 1 Open-emr 1 Openemr 2024-11-21 5.4 Medium
Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2494 1 Open-emr 1 Openemr 2024-11-21 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.
CVE-2022-2493 1 Open-emr 1 Openemr 2024-11-21 8.1 High
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.
CVE-2022-25471 1 Open-emr 1 Openemr 2024-11-21 8.1 High
An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zend_modules/public/Installer/register.
CVE-2022-25041 1 Open-emr 1 Openemr 2024-11-21 4.3 Medium
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue.
CVE-2022-24643 1 Open-emr 1 Openemr 2024-11-21 5.4 Medium
A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0.
CVE-2022-1461 1 Open-emr 1 Openemr 2024-11-21 6.5 Medium
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1459 1 Open-emr 1 Openemr 2024-11-21 8.3 High
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1458 1 Open-emr 1 Openemr 2024-11-21 5.4 Medium
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1181 1 Open-emr 1 Openemr 2024-11-21 5.4 Medium
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.
CVE-2022-1180 1 Open-emr 1 Openemr 2024-11-21 3.5 Low
Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
CVE-2022-1179 1 Open-emr 1 Openemr 2024-11-21 5.4 Medium
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
CVE-2022-1178 1 Open-emr 1 Openemr 2024-11-21 5.4 Medium
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
CVE-2022-1177 1 Open-emr 1 Openemr 2024-11-21 4.3 Medium
Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.
CVE-2021-41843 1 Open-emr 1 Openemr 2024-11-21 6.5 Medium
An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parameter provider_id, as demonstrated by the /interface/main/calendar/index.php?module=PostCalendar&func=search URI.
CVE-2021-40352 1 Open-emr 1 Openemr 2024-11-21 6.5 Medium
OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users.
CVE-2021-32104 1 Open-emr 1 Openemr 2024-11-21 8.8 High
A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1.
CVE-2021-32103 1 Open-emr 1 Openemr 2024-11-21 4.8 Medium
A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.
CVE-2021-32102 1 Open-emr 1 Openemr 2024-11-21 8.8 High
A SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1.