10642 matches found
CVE-2022-24062
CVE-2022-24062 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue arises in JP2 file parsing where the code fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a...
CVE-2022-24062
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
CVE-2022-24061
CVE-2022-24061 affects Sante DICOM Viewer Pro (11.8.7.0). The vulnerability lies in DCM file parsing where the code fails to validate the existence of an object before operating on it, enabling an information disclosure condition. The ZDI advisory (ZDI-22-253) labels it as a Use-After-Free Inform...
CVE-2022-24060
The CVE-2022-24060 entry affects Sante DICOM Viewer Pro 11.8.7.0. The vulnerability stems from the parsing of DCM files, where crafted DCM data can trigger a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, could ena...
CVE-2022-24058
CVE-2022-24058 affects Sante DICOM Viewer Pro 11.8.7.0. The flaw lies in the parsing of J2K files, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...
CVE-2022-24057
Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24057 due to a flaw in J2K file parsing. Crafted J2K data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malic...
CVE-2022-24056
Summary (Mature details available): CVE-2022-24056 affects Sante DICOM Viewer Pro (e.g., 11.8.7.0). The root cause is a flaw in the J2K file parsing logic that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitati...
CVE-2022-24056
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2022-24055
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-24055
Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24055 due to a flaw in GIF file parsing. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure. It requires user interaction (target must v...
CVE-2022-24052
Disclaimer: This data contains information about vulnerable...
CVE-2022-24052
MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
CVE-2022-24052
MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
CVE-2022-24052
Removed by vendor...
CVE-2022-24052
MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
CVE-2022-24052
CVE-2022-24052 is a MariaDB CONNECT Storage Engine heap-based buffer overflow privilege-escalation flaw. The issue arises from insufficient validation of user-supplied data length before copying into a fixed-size heap buffer during SQL query processing, allowing an authenticated, local attacker t...
CVE-2022-24051
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
CVE-2022-24051
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
CVE-2022-24051
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...