Lucene search
+L

1530 matches found

OSV
OSV
added 2024/06/11 9:15 p.m.6 views

CVE-2024-28877

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability...

8.8CVSS6.4AI score0.00686EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/11 8:17 p.m.20 views

CVE-2024-33606 MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme

An attacker could retrieve sensitive files medical images as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability...

8.8CVSS6.7AI score0.00465EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/11 8:15 p.m.53 views

CVE-2024-28877 MicroDicom DICOM Viewer Stack-based Buffer Overflow

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability...

8.8CVSS0.00686EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/11 8:15 p.m.33 views

CVE-2024-28877 MicroDicom DICOM Viewer Stack-based Buffer Overflow

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability...

8.8CVSS7.6AI score0.00686EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/11 12:00 a.m.17 views

PT-2024-25372 · Unknown · Microdicom Dicom Viewer

Name of the Vulnerable Software and Affected Versions: MicroDicom DICOM Viewer affected versions not specified Description: The issue allows an attacker to retrieve sensitive files, such as medical images, and also enables them to add new medical images or overwrite existing ones on the system...

8.8CVSS6AI score0.00465EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:00 a.m.14 views

The vulnerability of the built-in server of the medical image and data management system Sante PACS Server PG allows a hacker to execute arbitrary codes.

The vulnerability in the embedded DICOM server of the medical image and data management system Sante PACS Server PG is related to the lack of measures taken to protect the SQL query structure when processing the NAME parameter of a patient record. Exploiting this vulnerability allows an attacker ...

10CVSS8.3AI score0.00965EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.21 views

Fedora: Security Advisory (FEDORA-2024-11821b16ac)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.01474EPSS
SaveExploits3References9
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.23 views

Fedora: Security Advisory for gdcm (FEDORA-2024-7a57842ec3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.01474EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.23 views

Fedora: Security Advisory (FEDORA-2024-fae33e6e9f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.01474EPSS
SaveExploits3References9
NVD
NVD
added 2024/05/22 8:15 p.m.30 views

CVE-2023-51637

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability. The specific flaw exists with...

9.8CVSS10AI score0.00965EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/22 8:15 p.m.8 views

CVE-2023-51637

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability. The specific flaw exists with...

9.8CVSS6.3AI score0.00965EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/22 7:17 p.m.20 views

CVE-2023-51637 Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability. The specific flaw exists with...

9.8CVSS8.7AI score0.00965EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/22 7:17 p.m.30 views

CVE-2023-51637 Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability. The specific flaw exists with...

9.8CVSS10AI score0.00965EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/22 7:17 p.m.91 views

CVE-2023-51637

CVE-2023-51637 concerns Sante PACS Server PG. The vulnerability is in the DICOM service (default port 11122) where the NAME element of a PATIENT record is parsed to build SQL queries without proper input validation, enabling remote code execution with NETWORK SERVICE privileges. Impact is high (n...

9.8CVSS10AI score0.00965EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/05/22 6:15 p.m.28 views

CVE-2024-29421

xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code...

6.2CVSS7.2AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/22 6:15 p.m.2 views

DEBIAN-CVE-2024-29421

xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code...

6.2CVSS5.8AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/22 6:15 p.m.13 views

CVE-2024-29421

xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code...

7.8AI score
SaveExploits0References1
OSV
OSV
added 2024/05/22 6:15 p.m.6 views

UBUNTU-CVE-2024-29421

xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code...

6.2CVSS6AI score0.00245EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2024/05/22 5:27 p.m.62 views

CVE-2024-29421

xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code...

6.2CVSS7.7AI score0.00245EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/05/22 12:00 a.m.12 views

Santesoft Sante PACS Server 安全漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft Cyprus. Used to store, archive, manage, view and burn medical images. A security vulnerability exists in Santesoft San...

9.8CVSS9.7AI score0.00965EPSS
SaveExploits0References2
Rows per page
Query Builder