1385 matches found
filesaveimaging.com Cross Site Scripting vulnerability OBB-2978540
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
francelifeimaging.fr Cross Site Scripting vulnerability OBB-2855006
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
apache-commons:ImagingJpegFuzzer: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>
Detailed Report: https://oss-fuzz.com/testcase?key=6469414542770176 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: ImagingJpegFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-commons:ImagingBmpFuzzer: Security exception in org.apache.commons.imaging.common.BinaryFunctions.readBytes
Detailed Report: https://oss-fuzz.com/testcase?key=5238437669634048 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: ImagingBmpFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
grace-imaging.com Cross Site Scripting vulnerability OBB-2760749
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DEBIAN-CVE-2022-2121
OFFIS DCMTK's All versions prior to 3.6.7 has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition...
soundimaging.com Cross Site Scripting vulnerability OBB-2641008
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-29875
A vulnerability has been identified in Biograph Horizon PET/CT Systems All VJ30 versions VJ30C-UD01, MAGNETOM Family NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A, MAMMOMAT Revelation All VC20 versions VC20D, NAEOTOM Alpha All VA40 versions VA40 SP2, SOMATOM X.cite All versions VA30 SP5 or...
CVE-2022-29875
A vulnerability has been identified in Biograph Horizon PET/CT Systems All VJ30 versions VJ30C-UD01, MAGNETOM Family NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A, MAMMOMAT Revelation All VC20 versions VC20D, NAEOTOM Alpha All VA40 versions VA40 SP2, SOMATOM X.cite All versions VA30 SP5 or...
CVE-2022-29875
CVE-2022-29875 describes a deserialization vulnerability in Siemens Healthineers imaging software (multiple products and versions listed in the initial document). The root cause is that the affected applications deserialize untrusted data without sufficient validations, which could allow an unaut...
多款Siemens 产品代码问题漏洞
Siemens Healthineers syngo is a general imaging software for medical applications from Siemens, Germany. It is used for 2D, 3D and 4D reading and advanced visualization. A security vulnerability exists in several Siemens Healthineers products that stems from a deserialization issue. An...
GHSA-CFMR-38G9-F2H7 Pillow denial of service via Crafted Block Size
PIL/IcnsImagePlugin.py in Python Imaging Library PIL and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size...
Pillow denial of service via Crafted Block Size
PIL/IcnsImagePlugin.py in Python Imaging Library PIL and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size...
Imagemagick Studio ImageMagick 资源管理错误漏洞
ImageMagick is a set of open source image processing software. The software can read, convert or write images in a variety of formats.ImageMagick is vulnerable to security flaws, which attackers exploit by sending specially crafted DICOM image files to cause information leakage and denial of...
CVE-2022-24816
JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging JAI API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects th...
Remote code execution
JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging JAI API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects th...
CVE-2022-24816 Improper Control of Generation of Code in jai-ext
JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging JAI API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects th...
CVE-2022-24816 Improper Control of Generation of Code in jai-ext
JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging JAI API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects th...
CVE-2022-24816 Improper Control of Generation of Code in jai-ext
JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging JAI API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects th...
CVE-2022-24816
CVE-2022-24816 (JAI-EXT/Jai-EXT) affects GeoServer ecosystems where JAI-EXT allows a Jiffle script to be supplied over a network and then compiled to Java code via Janino, enabling Remote Code Execution. The GeoServer downstream is specifically noted. The known remediation is that version 1.2.22 ...