440 matches found
CVE-2026-46722: Improper Restriction of XML External Entity Reference
The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index...
CVE-2026-46724: Improper Limitation of a Pathname to a Restricted Directory
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...
PT-2026-41864
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...
openSUSE 16 Security Update : orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc (openSUSE-SU-2026:20193-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20193-1 advisory. Changes in orthanc: - dcmtk 370 breaks TW build - switch to lua 5.4 - patch out boost component system from framework - version 1.12.10 ' long...
OPENSUSE-SU-2026:20193-1 Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc
This update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc fixes the following issues: Changes in orthanc: - dcmtk 370 breaks TW...
CVE-2016-10947
The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin...
Malicious code in bitcoin-indexer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c3f96c759562e2a831cfe8886f66f67c9793b45674fcf3a02082b0c658d37e The package bitcoin-indexer was found to contain malicious code...
MAL-2025-49575 Malicious code in bitcoin-indexer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c3f96c759562e2a831cfe8886f66f67c9793b45674fcf3a02082b0c658d37e The package bitcoin-indexer was found to contain malicious code...
EUVD-2025-38718
Malicious code in bitcoin-indexer npm...
EUVD-2020-2127
Malware in sbrugna...
EUVD-2020-2120
Malware in sbrugna...
EUVD-2020-2159
Malware in sbrugna...
EUVD-2006-1568
Malware in sbrugna...
EUVD-2020-2160
Malware in sbrugna...
EUVD-2008-6153
Malware in sbrugna...
EUVD-2016-1939
Malware in sbrugna...
EUVD-2020-2124
Malware in sbrugna...
EUVD-2020-2108
Malware in sbrugna...