Vulnerability index

Browse CVEs

37 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Openclinic Ga HIGH 7.5
CVE-2023-40279

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main…

No fix yet
Fix from $1,950 2024-03-19
Openclinic Ga HIGH 7.5
CVE-2023-40278

An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp compone…

No fix yet
Fix from $1,950 2024-03-19
Openclinic Ga CRITICAL 9.1
CVE-2023-40275

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchBy…

Mitigation only
Fix from $2,300 2024-03-19
Openclinic Ga CRITICAL 9.1
CVE-2023-40276

An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp.

No fix yet
Fix from $2,300 2024-03-19
Openclinic Ga HIGH 7.5
CVE-2023-40280

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popu…

No fix yet
Fix from $1,950 2024-03-19
Openclinic Ga MEDIUM 6.1
CVE-2023-40277

An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in the login.jsp message …

No fix yet
Fix from $1,600 2024-03-19
Openclinic Ga HIGH 7.8
CVE-2021-37364

OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify permission to openclinic folders/…

No fix yet
Fix from $1,950 2021-10-26
Openclinic Ga HIGH 8.8
CVE-2020-27242

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoLocation parameter in th…

No fix yet
Fix from $1,950 2021-05-11
Openclinic Ga HIGH 8.8
CVE-2020-27243

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoService parameter in the…

No fix yet
Fix from $1,950 2021-05-11
Openclinic Ga HIGH 8.8
CVE-2020-27244

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoCode parameter in the ‘l…

No fix yet
Fix from $1,950 2021-05-11
Openclinic Ga HIGH 8.8
CVE-2020-27245

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘…

No fix yet
Fix from $1,950 2021-05-11
Openclinic Ga HIGH 8.8
CVE-2020-27246

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoComment parameter in the…

No fix yet
Fix from $1,950 2021-05-11
Openclinic Ga HIGH 8.8
CVE-2020-27232

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can le…

No fix yet
Fix from $1,950 2021-05-10
Openclinic Ga HIGH 8.8
CVE-2020-27226

An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL …

No fix yet
Fix from $1,950 2021-05-10
Openclinic Ga HIGH 8.8
CVE-2020-27229

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findPersonID paramet…

No fix yet
Fix from $1,950 2021-05-10
Openclinic Ga HIGH 8.8
CVE-2020-27230

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findSector parameter…

No fix yet
Fix from $1,950 2021-05-10
Openclinic Ga HIGH 8.8
CVE-2020-27231

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findDistrict paramet…

No fix yet
Fix from $1,950 2021-05-10
Openclinic Ga CRITICAL 9.8
CVE-2020-27241

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp p…

No fix yet
Fix from $2,300 2021-04-19
Openclinic Ga CRITICAL 9.8
CVE-2020-27240

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.js…

No fix yet
Fix from $2,300 2021-04-19
Openclinic Ga CRITICAL 9.8
CVE-2020-27237

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parame…

No fix yet
Fix from $2,300 2021-04-15
Openclinic Ga CRITICAL 9.8
CVE-2020-27238

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is v…

No fix yet
Fix from $2,300 2021-04-15
Openclinic Ga CRITICAL 9.8
CVE-2020-27239

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp pa…

No fix yet
Fix from $2,300 2021-04-15
Openclinic Ga CRITICAL 9.8
CVE-2020-27235

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the description parameter. An attacker can make…

No fix yet
Fix from $2,300 2021-04-13
Openclinic Ga CRITICAL 9.8
CVE-2020-27236

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclature parameter. An attacker can…

No fix yet
Fix from $2,300 2021-04-13
Openclinic Ga CRITICAL 9.8
CVE-2020-27227

An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to be execute…

No fix yet
Fix from $2,300 2021-04-13
Openclinic Ga CRITICAL 9.8
CVE-2020-27233

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the supplierUID parameter. An attacker can make…

No fix yet
Fix from $2,300 2021-04-13
Openclinic Ga CRITICAL 9.8
CVE-2020-27234

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the serviceUID parameter. An attacker can make …

No fix yet
Fix from $2,300 2021-04-13
Openclinic Ga HIGH 7.8
CVE-2020-27228

An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3. Overwriting the binary can result i…

No fix yet
Fix from $1,950 2021-04-13
Openclinic Ga HIGH 8.8
CVE-2020-14486

An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which …

Mitigation only
Fix from $1,950 2020-07-29
Openclinic Ga HIGH 8.8
CVE-2020-14490

OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure …

Mitigation only
Fix from $1,950 2020-07-29