Search vulnerabilities

Results 2

Export CSV
CVE-2020-14488

OpenClinic GA

OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2020-14487

OpenClinic GA

OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.

CVSS 3.1 · 9.4 Critical EPSS 2.2% KEV · Not listed
Vendors
Products