EUVD-2026-51339

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...

CVE-2026-56758

The CVE-2026-56758 issue affects the ACSE layer during MMS connection establishment. Specifically, the AARQ PDU parsing of the calling AP title can be broken if an attacker controls a length value of zero or one, causing the parser to read past the end of a heap buffer. Documented impact in the c...

CVE-2026-56758 MZ Automation libiec61850 Out-of-bounds Read

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...

CVE-2021-45769

A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...

DLA-755-1 dcmtk - security update

Bulletin has no description...

OsiriX DICOM Viewer 8.0.1 - Memory Corruption

OsiriX DICOM Viewer 8.0.1 - Memory Corruption !/usr/bin/env python -- coding: utf8 -- OsiriX DICOM Viewer 8.0.1 dulparse.cc Remote Memory Corruption Vulnerability Vendor: Pixmeo Sarl Product web page: http://www.osirix-viewer.com Affected version: OsiriX 8.0.1 Summary: With high performance and a...

DCMTK 3.6.0 storescp - Stack Buffer Overflow Exploit

Exploit for linux platform in category dos / poc !/usr/bin/env python -- coding: utf8 -- DCMTK storescp DICOM storage C-STORE SCP Remote Stack Buffer Overflow Vendor: OFFIS e. V. Product web page: http://www.dcmtk.org Affected version: = 3.6.0 Not affected: DCMTK-3.6.120160216 -...

CVE-2015-0729

Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server Solution Engine ACSE 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server Solution Engine ACSE 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005...

CVE-2015-0729

Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) is affected by a file-inclusion based XSS vulnerability (Bug ID CSCuu11005). An unauthenticated, remote attacker can inject arbitrary script/HTML via crafted parameters, with exploitation described in Cisco advisory and CVSSv2 bas...

CVE-2015-0729

Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server Solution Engine ACSE 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005...