Lucene search
+L

518 matches found

NVD
NVD
added 2022/02/18 8:15 p.m.25 views

CVE-2022-24061

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS0.01538EPSS
Exploits0References1
Prion
Prion
added 2022/02/18 8:15 p.m.21 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.8CVSS7.8AI score0.01848EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/02/18 8:15 p.m.22 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS5.2AI score0.01538EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/02/18 7:51 p.m.76 views

CVE-2022-24061

CVE-2022-24061 affects Sante DICOM Viewer Pro (11.8.7.0). The vulnerability lies in DCM file parsing where the code fails to validate the existence of an object before operating on it, enabling an information disclosure condition. The ZDI advisory (ZDI-22-253) labels it as a Use-After-Free Inform...

5.5CVSS5.2AI score0.01538EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/02/18 7:51 p.m.101 views

CVE-2022-24060

The CVE-2022-24060 entry affects Sante DICOM Viewer Pro 11.8.7.0. The vulnerability stems from the parsing of DCM files, where crafted DCM data can trigger a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, could ena...

5.5CVSS5.2AI score0.01538EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/02/18 7:51 p.m.96 views

CVE-2022-24059

CVE-2022-24059 concerns Sante DICOM Viewer Pro 11.8.7.0. Multiple connected sources (e.g., ZDI-22-251, Red Hat, CNVD/CVEs) confirm a vulnerability in the DCM file parser: crafted DCM data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the...

7.8CVSS7.8AI score0.01848EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2022/02/09 11:15 p.m.26 views

CVE-2021-33119

Improper access control in the IntelR RealSenseTM DCM before version 20210625 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS0.0024EPSS
Exploits0References1
Prion
Prion
added 2022/02/09 11:15 p.m.21 views

Improper access control

Improper access control in the IntelR RealSenseTM DCM before version 20210625 may allow an authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.2AI score0.0024EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/02/09 10:4 p.m.97 views

CVE-2021-33119

CVE-2021-33119 affects Intel RealSense Depth Camera Manager (DCM) software prior to version 20210625. Root cause: improper access control that could allow an authenticated user to disclose local information. Impact: partial confidentiality exposure with local access; no exploitation details provi...

5.5CVSS5.1AI score0.0024EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/09 10:4 p.m.31 views

CVE-2021-33119

Improper access control in the IntelR RealSenseTM DCM before version 20210625 may allow an authenticated user to potentially enable information disclosure via local access...

5.4AI score0.0024EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/02 12:0 a.m.45 views

Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5AI score0.01848EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2022/02/02 12:0 a.m.49 views

Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.1AI score0.01538EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2022/02/02 12:0 a.m.47 views

Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.6AI score0.01538EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2022/01/10 12:0 a.m.28 views

Siemens syngo DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens syngo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM...

7.8CVSS6.4AI score0.00323EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:0 a.m.45 views

Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM...

7.8CVSS4.6AI score0.02049EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/10/26 12:0 a.m.39 views

Adobe Bridge 11.x < 11.1.2 Multiple Vulnerabilities (APSB21-94)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 11.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-94 advisory. - Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the...

9.3CVSS7.5AI score0.03824EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2021/10/26 12:0 a.m.44 views

Adobe Bridge 11.x < 11.1.2 Multiple Vulnerabilities (APSB21-94)

The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-94 advisory. - Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of...

9.3CVSS7.5AI score0.03824EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2021/07/02 12:0 a.m.7 views

The vulnerabilities of the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the console image editor ImageMagick components, related to the lack of data validation, allow attackers to trigger service interruptions.

The vulnerability of the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the ImageMagick console graphic editor’s code components coders/dcm.c, coders/pwp.c, coders/cals.c, and coders/p Pict.c is related to the lack of data validation during function execution. Exploitin...

6.5CVSS6.8AI score0.0308EPSS
Exploits0References11Affected Software3
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.33 views

SUSE: Security Advisory (SUSE-SU-2014:1631-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.02889EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2014:1595-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.02889EPSS
Exploits0References2
Rows per page
Query Builder