agentprime: iqonicdesign-kivicare-clinic-patient-management-system-ehrEvery new CVE for iqonicdesign-kivicare-clinic-patient-management-system-ehr.https://agentprime.io/CVE-2026-15453: KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameterhttps://agentprime.io/advisories/CVE-2026-15453/https://agentprime.io/advisories/CVE-2026-15453/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Aug 2026 03:25:58 GMTCVECVE-2026-15072: KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilderhttps://agentprime.io/advisories/CVE-2026-15072/https://agentprime.io/advisories/CVE-2026-15072/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 02:31:18 GMTCVECVE-2026-15073: KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionControllerhttps://agentprime.io/advisories/CVE-2026-15073/https://agentprime.io/advisories/CVE-2026-15073/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 02:31:16 GMTCVECVE-2026-11990: KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpointhttps://agentprime.io/advisories/CVE-2026-11990/https://agentprime.io/advisories/CVE-2026-11990/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 09:32:45 GMTCVECVE-2026-2992: KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizardhttps://agentprime.io/advisories/CVE-2026-2992/https://agentprime.io/advisories/CVE-2026-2992/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 15:28:30 GMTCVECVE-2026-2991: KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Tokenhttps://agentprime.io/advisories/CVE-2026-2991/https://agentprime.io/advisories/CVE-2026-2991/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 15:28:29 GMTCVECVE-2026-0927: KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2026-0927/https://agentprime.io/advisories/CVE-2026-0927/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 05:29:50 GMTCVECVE-2025-1572: KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameterhttps://agentprime.io/advisories/CVE-2025-1572/https://agentprime.io/advisories/CVE-2025-1572/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Feb 2025 07:34:38 GMTCVECVE-2024-11729: KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-11729/https://agentprime.io/advisories/CVE-2024-11729/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Dec 2024 11:09:11 GMTCVECVE-2024-11730: KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-11730/https://agentprime.io/advisories/CVE-2024-11730/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Dec 2024 11:09:10 GMTCVECVE-2024-11728: KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-11728/https://agentprime.io/advisories/CVE-2024-11728/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Dec 2024 09:22:59 GMTCVEcritical