Vulnerability index

Browse CVEs

21 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Librehealth Ehr HIGH 8.8
CVE-2022-31496

LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.

No fix yet
Fix from $1,950 2022-06-09
Librehealth Ehr MEDIUM 6.1
CVE-2022-31497

LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.

Mitigation only
Fix from $1,600 2022-06-08
Librehealth Ehr MEDIUM 6.1
CVE-2022-31495

LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.

No fix yet
Fix from $1,600 2022-06-07
Librehealth Ehr MEDIUM 6.1
CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.

No fix yet
Fix from $1,600 2022-06-06
Librehealth Ehr MEDIUM 6.1
CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.

No fix yet
Fix from $1,600 2022-06-06
Librehealth Ehr MEDIUM 6.1
CVE-2022-31492

Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.

No fix yet
Fix from $1,600 2022-06-06
Librehealth Ehr MEDIUM 6.1
CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.

No fix yet
Fix from $1,600 2022-06-06
Librehealth Ehr HIGH 8.8
CVE-2022-29938

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\payment_mas…

No fix yet
Fix from $1,950 2022-05-05
Librehealth Ehr MEDIUM 5.4
CVE-2022-29939

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sl_eob_process.php leads to multiple cross-…

No fix yet
Fix from $1,600 2022-05-05
Librehealth Ehr MEDIUM 5.4
CVE-2022-29940

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to multiple cr…

No fix yet
Fix from $1,600 2022-05-05
Librehealth Ehr HIGH 8.8
CVE-2020-23829

interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers …

No fix yet
Fix from $1,950 2020-09-01
Librehealth Ehr CRITICAL 9.0
CVE-2020-11436

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.

No fix yet
Fix from $2,300 2020-07-15
Librehealth Ehr HIGH 8.8
CVE-2020-11438

LibreHealth EMR v2.0.0 is affected by systemic CSRF.

No fix yet
Fix from $1,950 2020-07-15
Librehealth Ehr HIGH 8.8
CVE-2020-11439

LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application.

No fix yet
Fix from $1,950 2020-07-15
Librehealth Ehr HIGH 8.8
CVE-2018-1000839

LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This atta…

No fix yet
Fix from $1,950 2018-12-20
Librehealth Ehr HIGH 8.8
CVE-2018-1000649

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php (2) vulnerability in Patient file letter functi…

No fix yet
Fix from $1,950 2018-08-20
Librehealth Ehr HIGH 8.8
CVE-2018-1000650

LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to …

No fix yet
Fix from $1,950 2018-08-20
Librehealth Ehr HIGH 8.8
CVE-2018-1000648

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can resul…

No fix yet
Fix from $1,950 2018-08-20
Librehealth Ehr HIGH 8.8
CVE-2018-1000646

LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write fi…

No fix yet
Fix from $1,950 2018-08-20
Librehealth Ehr HIGH 7.1
CVE-2018-1000647

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial…

No fix yet
Fix from $1,950 2018-08-20
Librehealth Ehr MEDIUM 6.5
CVE-2018-1000645

LibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file dis…

Fix: 2.0.0+
Fix from $1,600 2018-08-20