CVE IDSeverityCVSSDescriptionDate
CVE-2026-124458MEDIUM6.5OpenEMR before 8.4.0 contains an authorization bypass vulnerability in the FHIR GET /fhir/Person/:uuid route t…2026-11-08
CVE-2026-124459HIGH8.1OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in many encounter-form view an…2026-11-08
CVE-2026-124460MEDIUM6.5OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in PortalPatientController::Re…2026-11-08
CVE-2026-124461HIGH8.1OpenEMR before 8.3.0 contains a missing authorization vulnerability in library/ajax/upload.php that allows any…2026-11-08
CVE-2026-124462MEDIUM6.5OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsiteDocumentController::Q…2026-11-08
CVE-2026-124463HIGH8.7OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with…2026-11-08
CVE-2026-124464MEDIUM6.5OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows patient-scoped SMART tokens to…2026-11-08
CVE-2026-124465MEDIUM6.5Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batch_consumer.…2026-11-08
CVE-2026-124466HIGH7.2OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unauthenticated attacker…2026-11-08
CVE-2026-124467HIGH8.8OpenEMR before 8.4.0 contains a local file inclusion in the ESign router (library/ESign/Router.php), which pas…2026-11-08
CVE-2026-124468HIGH7.1OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Standard REST API patient insurance and em…2026-11-08
CVE-2026-124469CRITICAL9.9OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup (DrugSales…2026-11-08
CVE-2026-124470MEDIUM6.5OpenEMR before 8.3.0 contains a broken object level authorization vulnerability in portal/report/portal_custom…2026-11-08
CVE-2026-124471HIGH8.1OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_invoice.php th…2026-11-08
CVE-2026-124472HIGH8.1OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_patient_note.p…2026-11-08
CVE-2026-124473HIGH7.1OpenEMR before 8.3.0 contains a broken object-level authorization vulnerability in the SOAP note update API, w…2026-11-08
CVE-2026-124474MEDIUM6.1MRBS (Meeting Room Booking System) before 1.12.3 contains a reflected cross-site scripting vulnerability that …2026-11-08
CVE-2026-124475HIGH7.1OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that…2026-11-08
CVE-2026-124476MEDIUM6.5OpenEMR before 8.3.0 contains an insecure direct object reference in portal/lib/paylib.php, which writes the r…2026-11-08
CVE-2026-124477HIGH8.8OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privileged authenticated u…2026-11-08
CVE-2026-124478MEDIUM6.5OpenEMR before 8.3.0 contains a missing authorization vulnerability in the addRecall action of /interface/main…2026-11-08
CVE-2026-124479MEDIUM6.5OpenEMR before 8.4.0 contains an arbitrary local file read vulnerability in REST document download, where the …2026-11-08
CVE-2026-124480HIGH8.8OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows low-privileged authenticated u…2026-11-08
CVE-2026-124481MEDIUM6.5OpenEMR before 8.4.0 contains an improper authorization vulnerability in Rainforest patient portal payments th…2026-11-08
CVE-2026-124482MEDIUM6.5OpenEMR before 8.4.0 contains an authorization bypass allowing low-privileged SMART standalone-launch users to…2026-11-08
CVE-2026-124483HIGH8.3OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API route…2026-11-08
CVE-2026-124484HIGH8.8OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows…2026-11-08
CVE-2026-124485MEDIUM6.5OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API …2026-11-08
CVE-2026-124486HIGH8.8OpenEMR before 8.3.0 contains a missing authorization vulnerability in the classic document controller that al…2026-11-08
CVE-2026-124487MEDIUM6.5OpenEMR before 8.4.0 contains an improper authorization vulnerability in the non-patient POST /fhir/DocumentRe…2026-11-08
CVE-2026-124488HIGH8.1OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authenticated clinicians lacki…2026-11-08
CVE-2026-124489HIGH7.1OpenEMR before 8.3.0 contains a broken access control vulnerability in portal/portal_payment.php that allows l…2026-11-08
CVE-2026-124490CRITICAL9.1OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() …2026-11-08
CVE-2026-124491MEDIUM6.4SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() …2026-11-08
CVE-2026-124492HIGH7.6SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBook…2026-11-08
CVE-2026-124493NAN/ASunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor th…2026-11-08
CVE-2026-124494NAN/ASunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer…2026-11-08
CVE-2026-124551MEDIUM5.3ClassroomIO through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users of an…2026-11-08
CVE-2026-124552MEDIUM4.8Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modu…2026-11-08
CVE-2026-124553HIGH7.5BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to…2026-11-08
CVE-2024-41786MEDIUM5.3IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web…2026-11-08
CVE-2025-0166LOW2.7IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could di…2026-11-08
CVE-2025-1837MEDIUM5.4IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could al…2026-11-08
CVE-2025-36075MEDIUM5.3IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 t…2026-11-08
CVE-2026-101117CRITICAL9.1IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restricti…2026-11-08
CVE-2026-102618LOW3.6IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated user to indirectly disable system auditing, which th…2026-11-08
CVE-2026-103320MEDIUM4.3IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the…2026-11-08
CVE-2026-109899HIGH7.1Missing Authorization vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Exploiting…2026-11-08
CVE-2026-109900CRITICAL9.6Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows P…2026-11-08
CVE-2026-114186MEDIUM6.5Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorre…2026-11-08
←95 / 8516→