Page 2 of 128 results (0.001 seconds)

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2943 – Code Injection in openemr/openemr

https://notcve.org/view.php?id=CVE-2023-2943

Code Injection in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9 https://huntr.dev/bounties/4190f944-dc2c-4624-9abf-31479456faa9 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 4.8EPSS: 1%CPEs: 1EXPL: 1

CVE-2023-2947 – Cross-site Scripting (XSS) - Stored in openemr/openemr

https://notcve.org/view.php?id=CVE-2023-2947

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/8d2d601ac40aca75bcd2c3cf193f59c8e56d8425 https://huntr.dev/bounties/52534def-acab-4200-a79a-89ef4ce6a0b0 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2946 – Improper Access Control in openemr/openemr

https://notcve.org/view.php?id=CVE-2023-2946

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/81832acc14207e577e76c4175967c99ae7e3d3f4 https://huntr.dev/bounties/e550f4b0-945c-4886-af7f-ee0dc30b2a08 • CWE-284: Improper Access Control •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2945 – Missing Authorization in openemr/openemr

https://notcve.org/view.php?id=CVE-2023-2945

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/3656bc88288957d68ba040cad2e5f9dbd1b607b1 https://huntr.dev/bounties/62de71bd-333d-4593-91a5-534ef7f0c435 • CWE-862: Missing Authorization •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2674 – Improper Access Control in openemr/openemr

https://notcve.org/view.php?id=CVE-2023-2674

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/bb4244c83a74628faafabc0598366f49863914a9 https://huntr.dev/bounties/af73e913-730c-4245-88ce-26fc908d3644 • CWE-284: Improper Access Control •