| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-15143 | 7.5 | Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) catid or (2) providerid parameter. | 2018-10-10 18:18:00 | 2018-08-13 18:29:00 |
| CVE-2018-7097 | 6.8 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery. | 2018-10-10 18:13:00 | 2018-08-14 14:29:00 |
| CVE-2018-7098 | 3.6 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow directory traversal. | 2018-10-10 18:12:00 | 2018-08-14 14:29:00 |
| CVE-2018-15144 | 6.5 | SQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the search_term parameter. | 2018-10-10 18:12:00 | 2018-08-13 18:29:00 |
| CVE-2018-15145 | 7.5 | Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameter. | 2018-10-10 18:11:00 | 2018-08-13 18:29:00 |
| CVE-2018-15154 | 6.5 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sl_eob_search.php after modifying the "print_command" global va | 2018-10-10 17:21:00 | 2018-08-15 17:29:00 |
| CVE-2018-15153 | 6.5 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global varia | 2018-10-10 17:20:00 | 2018-08-15 17:29:00 |
| CVE-2018-15155 | 6.5 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/fax_dispatch.php after modifying the "hylafax_enscript" global vari | 2018-10-10 17:19:00 | 2018-08-15 17:29:00 |
| CVE-2018-15156 | 6.5 | OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxq.php after modifying the "hylafax_server" global variable in in | 2018-10-10 17:17:00 | 2018-08-15 17:29:00 |
| CVE-2018-1999037 | 4.0 | A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource. | 2018-10-10 17:04:00 | 2018-08-01 13:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: