CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-124457

    🚨 CVE-2026-124457 OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_process.php that allows authenticated...

  • CVE-2026-124458

    🚨 CVE-2026-124458 OpenEMR before 8.4.0 contains an authorization bypass vulnerability in the FHIR GET /fhir/Person/:uuid route that allows...

  • CVE-2026-124459

    🚨 CVE-2026-124459 OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in many encounter-form view and save endpoints...

  • CVE-2026-124461

    🚨 CVE-2026-124461 OpenEMR before 8.3.0 contains a missing authorization vulnerability in library/ajax/upload.php that allows any authenticated...

  • CVE-2026-124462

    🚨 CVE-2026-124462 OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsiteDocumentController::Query() that allows...

  • CVE-2026-124463

    🚨 CVE-2026-124463 OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to...

  • CVE-2026-124464

    🚨 CVE-2026-124464 OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows patient-scoped SMART tokens to read other...

  • CVE-2026-124465

    🚨 CVE-2026-124465 Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batch_consumer.go that panics...

  • CVE-2026-124466

    🚨 CVE-2026-124466 OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the...

  • CVE-2026-124467

    🚨 CVE-2026-124467 OpenEMR before 8.4.0 contains a local file inclusion in the ESign router (library/ESign/Router.php), which passes the...

  • CVE-2026-124468

    🚨 CVE-2026-124468 OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Standard REST API patient insurance and employer search...

  • CVE-2026-124469

    🚨 CVE-2026-124469 OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup (DrugSalesService::sellDrug)...

  • CVE-2026-124470

    🚨 CVE-2026-124470 OpenEMR before 8.3.0 contains a broken object level authorization vulnerability in portal/report/portal_custom_report.php that...

  • CVE-2026-124471

    🚨 CVE-2026-124471 OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_invoice.php that allows any...

  • CVE-2026-124472

    🚨 CVE-2026-124472 OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_patient_note.php that allows any...

  • CVE-2026-124473

    🚨 CVE-2026-124473 OpenEMR before 8.3.0 contains a broken object-level authorization vulnerability in the SOAP note update API, which does not...

  • CVE-2026-124474

    🚨 CVE-2026-124474 MRBS (Meeting Room Booking System) before 1.12.3 contains a reflected cross-site scripting vulnerability that allows...

  • CVE-2026-124475

    🚨 CVE-2026-124475 OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that allows...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху