Total 215 security vulnerabilities recorded for open-emr software and firmware.
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1....
Code Injection in GitHub repository openemr/openemr prior to 7.0.1....
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1....
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1....
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1....
A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacke...
A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the...
A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticat...
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2....
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2....
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2....
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2....
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2. ...
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2....
Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2....
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2....
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1....
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1....
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1....
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1....
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1....
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1....
Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1....
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0....