Top technology
Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
HIGH 8.8
CVE-2022-31496
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
Librehealth Ehr
No fix yet
MEDIUM 6.1
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
Librehealth Ehr
Mitigation only
MEDIUM 6.1
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
Librehealth Ehr
No fix yet
MEDIUM 6.1
CVE-2022-31494
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
Librehealth Ehr
No fix yet
MEDIUM 6.1
CVE-2022-31498
LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
Librehealth Ehr
No fix yet
MEDIUM 6.1
CVE-2022-31492
Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.
Librehealth Ehr
No fix yet
MEDIUM 6.1
CVE-2022-31493
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2022-29938
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\payment_mas…
Librehealth Ehr
No fix yet
MEDIUM 5.4
CVE-2022-29939
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sl_eob_process.php leads to multiple cross-…
Librehealth Ehr
No fix yet
MEDIUM 5.4
CVE-2022-29940
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to multiple cr…
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2020-23829
interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers …
Librehealth Ehr
No fix yet
CRITICAL 9.0
CVE-2020-11436
LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2020-11438
LibreHealth EMR v2.0.0 is affected by systemic CSRF.
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2020-11439
LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application.
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2018-1000839
LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This atta…
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2018-1000649
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php (2) vulnerability in Patient file letter functi…
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2018-1000650
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to …
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2018-1000648
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can resul…
Librehealth Ehr
No fix yet
HIGH 8.8
CVE-2018-1000646
LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write fi…
Librehealth Ehr
No fix yet
HIGH 7.1
CVE-2018-1000647
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial…
Librehealth Ehr
No fix yet
MEDIUM 6.5
CVE-2018-1000645
LibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file dis…
Librehealth Ehr
2.0.0+