| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-101533 | 6.6 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with ne | 2026-11-13 20:08:53 | 2026-10-20 22:18:02 |
| CVE-2026-126488 | 7.7 | OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal OnsiteDocument.Query endpoint, where mass-assigned _BitwiseAnd criteria parameters are placed unquoted into SQL with only quote-character escaping. Authenticated porta | 2026-11-13 19:42:48 | 2026-11-13 10:17:59 |
| CVE-2026-126489 | 7.2 | OpenEMR before 8.5.0 contains a second-order SQL injection vulnerability in the IPPF contraceptive issue feature because issue_ippf_con_save concatenates layout_options field_id values into a REPLACE INTO query as column names. Authenticated administ | 2026-11-13 19:41:57 | 2026-11-13 10:17:59 |
| CVE-2026-126490 | 3.1 | OpenEMR before 8.5.0 contains active debug code in interface/fax/fax_view.php that executes passthru("groups") and discloses the web server's Unix group memberships. Authenticated attackers with fax module access can supply a nonexistent jid value to | 2026-11-13 19:41:20 | 2026-11-13 10:17:59 |
| CVE-2026-126491 | 7.6 | OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics() where layout_options field_id values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious fie | 2026-11-13 19:39:18 | 2026-11-13 10:17:59 |
| CVE-2026-126492 | 7.1 | OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows low-privileged authenticated users to store malicious SQL via library/ajax/addlistitem.php. Attackers can persist a SQL fragment in the recent_patient_columns option | 2026-11-13 19:34:36 | 2026-11-13 10:17:59 |
| CVE-2026-126487 | 8.8 | OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows authenticated users to override system-wide global configuration values by storing global-prefixed keys through library/ajax/user_settings.php. Attackers can submit lab o | 2026-11-13 19:29:51 | 2026-11-13 10:17:58 |
| CVE-2026-126486 | 7.6 | OpenEMR before 8.5.0 contains a missing authorization vulnerability in portal/import_template.php, where several portal document template modes lack admin/forms ACL and CSRF checks. Any authenticated staff user can send mode=save_profiles to delete a | 2026-11-13 19:27:58 | 2026-11-13 10:17:58 |
| CVE-2026-96144 | 4.7 | Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. | 2026-11-13 19:19:58 | 2026-11-10 19:22:11 |
| CVE-2026-96126 | 7.8 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 2026-11-13 19:19:57 | 2026-11-10 19:22:10 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40236
Zapisa po stranici: