InVesalius 安全漏洞

InVesalius is a 3D medical image reconstruction software from InVesalius open source. A security vulnerability exists in InVesalius versions 3.1.99991 through 3.1.99998, which stems from an eval injection issue in a component that allows an attacker to execute arbitrary code by loading a crafted...

Fedora: Security Advisory (FEDORA-2024-f02d23b92b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-3dbd2c53ac)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: xmedcon-0.24.0-1.fc40

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...

[SECURITY] Fedora 39 Update: xmedcon-0.24.0-1.fc39

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...

Fedora 40 : xmedcon (2024-f02d23b92b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f02d23b92b advisory. - update xmedcon to 0.24.0 - fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM...

Fedora 39 : xmedcon (2024-3dbd2c53ac)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3dbd2c53ac advisory. - update xmedcon to 0.24.0 - fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM...

XSS Vulnerability in the Operations Management and Decision Support System of BYU Healthcare Information Technology, Inc.

Beida Medical Information Technology Co., Ltd. is one of the early enterprises engaged in medical informatization in China, and has innovatively launched the CHIS system, intelligent hospital information platform, and Internet hospital supervision platform, and is one of the leading providers and...

CVE-2024-40392

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...

PT-2024-28824 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System

Name of the Vulnerable Software and Affected Versions: SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the na...

MGASA-2024-0251 Updated dcmtk packages fix security vulnerabilities

Multiple vulnerabilities have been fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images. CVE-2024-28130 Segmentation faults due to incorrect typecast CVE-2024-34508 Segmentation fault via invalid DIMSE message CVE-2024-34509...

DCMTK Security Vulnerabilities

DCMTK is a collection of libraries and applications that implement most of the DICOM standards from the DCMTK open source. Software for inspecting, building and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...

OpenEMR has an unspecified vulnerability (CNVD-2024-31488)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR version 7.0.2. An attacker can exploit...

CVE-2024-33606

An attacker could retrieve sensitive files medical images as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability...

CVE-2024-33606

An attacker could retrieve sensitive files medical images as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability...

CVE-2024-33606 MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme

An attacker could retrieve sensitive files medical images as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability...

CVE-2024-33606

CVE-2024-33606 affects MicroDicom DICOM Viewer prior to version 2024.2. The issue is Improper Authorization in the Handler for the Custom URL Scheme, enabling an attacker to retrieve sensitive medical images and to plant or overwrite images on the victim’s system. Exploitation requires user inter...

CVE-2024-33606 MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme

An attacker could retrieve sensitive files medical images as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability...

MicroDicom DICOM Viewer

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : MicroDicom Equipment : DICOM Viewer Vulnerabilities : Improper Authorization in Handler for Custom URL Scheme, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these...

PT-2024-25372 · Unknown · Microdicom Dicom Viewer

Name of the Vulnerable Software and Affected Versions: MicroDicom DICOM Viewer affected versions not specified Description: The issue allows an attacker to retrieve sensitive files, such as medical images, and also enables them to add new medical images or overwrite existing ones on the system...