Known vulnerabilities in OpenClinic GA - page 2

Vendor: Frank Verbeke
Software: OpenClinic GA
Software CPE: cpe:2.3:a:frank_verbeke:openclinic_ga:*:*:*:*:*:*:*:*
Website: https://sourceforge.net/u/frankverbeke/profile/
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenClinic GA OpenClinic GA is affected by 33 known vulnerabilities: 4 high, 26 medium, 3 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52271 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27233		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU29510 - Hidden Functionality (Backdoor)
CVE-2020-14487		 CWE-912 High
No
No
 - 03.07.2020 SB2020070308
#VU29509 - Insufficiently Protected Credentials
CVE-2020-14489		 CWE-522 Low
No
No
 - 03.07.2020 SB2020070308
#VU29508 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-14495		 CWE-94 High
No
No
 - 03.07.2020 SB2020070308
#VU29507 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14492		 CWE-79 Low
No
No
 - 03.07.2020 SB2020070308
#VU29506 - Improper Authorization
CVE-2020-14486		 CWE-285 Medium
No
No
 - 03.07.2020 SB2020070308
#VU29505 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-14490		 CWE-22 Medium
No
No
 - 03.07.2020 SB2020070308
#VU29504 - Unrestricted Upload of File with Dangerous Type
CVE-2020-14488		 CWE-434 Medium
No
No
 - 03.07.2020 SB2020070308
#VU29503 - Command injection
CVE-2020-14493		 CWE-77 Medium
No
No
 - 03.07.2020 SB2020070308
#VU29502 - Missing Authorization
CVE-2020-14491		 CWE-862 Medium
No
No
 - 03.07.2020 SB2020070308
#VU29501 - Improper Authentication
CVE-2020-14494		 CWE-287 Medium
No
No
 - 03.07.2020 SB2020070308
#VU29500 - Improper Restriction of Excessive Authentication Attempts
CVE-2020-14484		 CWE-307 Medium
No
No
 - 03.07.2020 SB2020070308
#VU29499 - Authentication Bypass Using an Alternate Path or Channel
CVE-2020-14485		 CWE-288 High
No
No
 - 03.07.2020 SB2020070308


Showing elements 21 - 40 out of 33