Browse CVEs

CRITICAL 9.8 CVE-2019-14529EPSS 28% OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php. Openemr 5.0.2+ Fix from $2,3002019-08-02 CRITICAL 9.8 CVE-2018-17179EPSS 13% An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task function in /interface/forms/eye_mag/php/taskman_fun… Openemr 5.0.1.7+ Fix from $2,3002019-05-17 CRITICAL 9.8 CVE-2018-17181 An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit… Openemr 5.0.1.7+ Fix from $2,3002019-05-17 MEDIUM 5.3 CVE-2018-17180 An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php. Openemr 5.0.1.7+ Fix from $1,6002019-05-17 MEDIUM 6.1 CVE-2018-18035 A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated, remote attacker to conduct a cross-site scripting … Openemr 5.0.1.6+ Fix from $1,6002019-04-02 MEDIUM 5.4 CVE-2018-1000218 OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'file' parameter in line #43 of interface/fax/fax_view.php that c… Openemr No fix yet Fix from $1,6002018-08-20 MEDIUM 5.4 CVE-2018-1000219 OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'scan' parameter in line #41 of interface/fax/fax_view.php that c… Openemr No fix yet Fix from $1,6002018-08-20 HIGH 8.8 CVE-2018-15154EPSS 10% OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a… Openemr 5.0.1.4+ Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15155EPSS 10% OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a… Openemr 5.0.1.4+ Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15156EPSS 10% OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a… Openemr 5.0.1.4+ Fix from $1,9502018-08-15 CRITICAL 9.1 CVE-2018-15152EPSS 26% Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) porta… Openemr 5.0.1.4+ Fix from $2,3002018-08-15 HIGH 8.8 CVE-2018-15147 SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote … Openemr after 5.0.1.3 Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15148 SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated a… Openemr after 5.0.1.3 Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15149 SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a … Openemr after 5.0.1.3 Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15150 SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote … Openemr after 5.0.1.3 Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15151 SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authentica… Openemr after 5.0.1.3 Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15153EPSS 62% OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a… Openemr 5.0.1.4+ Fix from $1,9502018-08-15 HIGH 8.8 CVE-2018-15146 SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote au… Openemr after 5.0.1.3 Fix from $1,9502018-08-15 CRITICAL 9.8 CVE-2018-15145 Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arb… Openemr 5.0.1.4+ Fix from $2,3002018-08-13 CRITICAL 9.8 CVE-2018-15143 Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute ar… Openemr 5.0.1.4+ Fix from $2,3002018-08-13 HIGH 8.8 CVE-2018-15139EPSS 19% Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to exe… Openemr 5.0.1.4+ Fix from $1,9502018-08-13 HIGH 8.8 CVE-2018-15142EPSS 18% Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal … Openemr 5.0.1.4+ Fix from $1,9502018-08-13 HIGH 8.8 CVE-2018-15144 SQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authentica… Openemr 5.0.1.4+ Fix from $1,9502018-08-13 MEDIUM 6.5 CVE-2018-15140EPSS 17% Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal … Openemr 5.0.1.4+ Fix from $1,6002018-08-13 MEDIUM 6.5 CVE-2018-15141EPSS 14% Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal … Openemr 5.0.1.4+ Fix from $1,6002018-08-13 HIGH 8.8 CVE-2018-9250EPSS 32% interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname para… Openemr 5.0.1.1+ Fix from $1,9502018-05-18 HIGH 8.8 CVE-2018-10573 interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan paramete… Openemr 5.0.1+ Fix from $1,9502018-04-30 MEDIUM 6.5 CVE-2018-10572 interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplat… Openemr 5.0.1+ Fix from $1,6002018-04-30 MEDIUM 6.1 CVE-2018-10571 Multiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject arbitrary web script or HTML v… Openemr 5.0.1+ Fix from $1,6002018-04-30 HIGH 8.8 CVE-2018-1000019 OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenticated a… Openemr Patch available Fix from $1,9502018-02-09