https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 08:09:03 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-04364 cnvd-2015-04364 https://cve.radiocsirt.org/vuln/cnvd-2015-04364 https://cve.radiocsirt.org/vuln/euvd-2026-92617 EUVD-2026-92617 https://cve.radiocsirt.org/vuln/euvd-2026-92617 https://cve.radiocsirt.org/vuln/fkie_cve-2015-4453 <p>interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by (1) interface/fax/fax_dispatch_newpid.php and (2) interface/billing/sl_eob_search.php.</p> <p>interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by (1) interface/fax/fax_dispatch_newpid.php and (2) interface/billing/sl_eob_search.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-4453 https://cve.radiocsirt.org/vuln/ghsa-2mm4-c3cw-4h46 <p>interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by (1) interface/fax/fax_dispatch_newpid.php and (2) interface/billing/sl_eob_search.php.</p> <p>interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by (1) interface/fax/fax_dispatch_newpid.php and (2) interface/billing/sl_eob_search.php.</p> https://cve.radiocsirt.org/vuln/ghsa-2mm4-c3cw-4h46 https://cve.radiocsirt.org/vuln/gsd-2015-4453 gsd-2015-4453 https://cve.radiocsirt.org/vuln/gsd-2015-4453 https://cve.radiocsirt.org/vuln/jvndb-2015-000092 <p>OpenEMR is an electronic health records and medical practice management application. OpenEMR contains an authentication bypass vulnerability (CWE-302). Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>OpenEMR is an electronic health records and medical practice management application. OpenEMR contains an authentication bypass vulnerability (CWE-302). Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000092