Lucene search
+L

1536 matches found

CNNVD
CNNVD
added 2026/03/19 12:00 a.m.18 views

OpenEMR 路径遍历漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0.2 contained a path travers...

6.5CVSS6.4AI score0.00549EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/19 12:00 a.m.18 views

PT-2026-26331

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, the DICOM zip/export feature uses a user-supplied destination or path component when creating the zip file, without sanitizing path traversal sequences e.g. ../. An attacker...

6.5CVSS6.6AI score0.00549EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/03/12 2:02 p.m.15 views

EUVD-2026-7425

ImageMagick has Heap Out-of-Bounds Read in DCM Decoder ReadDCMImage...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/03/12 2:02 p.m.19 views

ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

A heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References4Affected Software19
OSV
OSV
added 2026/03/12 2:02 p.m.8 views

GHSA-PMQ6-8289-HX3V ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

A heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/25 7:43 p.m.18 views

CVE-2026-25927

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the DICOM viewer state API e.g. upload or state save/load accepts a document ID docid without verifying that the document belongs to the current user’s authorized patie...

7.1CVSS0.00204EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/02/25 6:43 p.m.26 views

CVE-2026-25927 OpenEMR Missing Authorization Checks in DICOM Viewer State API

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the DICOM viewer state API e.g. upload or state save/load accepts a document ID docid without verifying that the document belongs to the current user’s authorized patie...

7.1CVSS0.00204EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/02/25 6:43 p.m.11 views

EUVD-2026-8715

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the DICOM viewer state API e.g. upload or state save/load accepts a document ID docid without verifying that the document belongs to the current user’s authorized patie...

7.1CVSS5.5AI score0.00204EPSS
SaveExploits1References1
CVE
CVE
added 2026/02/25 6:43 p.m.40 views

CVE-2026-25927

OpenEMR before 8.0.0 exposes a DICOM viewer state API (upload/state save-load) that accepts a document ID (doc_id) without verifying ownership of the patient/encounter. An authenticated user can read or modify DICOM viewer state (e.g., annotations, view settings) by enumerating document IDs, lead...

7.1CVSS5.5AI score0.00204EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/02/25 6:43 p.m.10 views

CVE-2026-25927 OpenEMR Missing Authorization Checks in DICOM Viewer State API

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the DICOM viewer state API e.g. upload or state save/load accepts a document ID docid without verifying that the document belongs to the current user’s authorized patie...

7.1CVSS5.6AI score
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.15 views

SUSE CVE-2026-25982

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrect...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/25 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-25982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds re...

6.5CVSS6.9AI score0.0034EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.24 views

OpenEMR 安全漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0 contained security...

7.1CVSS5.8AI score0.00204EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/02/25 12:00 a.m.15 views

PT-2026-21982

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.0.0 Description OpenEMR is an electronic health records and medical practice management application. Versions prior to 8.0.0 have an issue where the DICOM viewer state API does not verify if a document belongs to th...

7.1CVSS5.3AI score0.00204EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/02/24 6:11 a.m.47 views

CVE-2026-25982

A flaw was found in ImageMagick, a software suite for image manipulation. When processing specially crafted DICOM Digital Imaging and Communications in Medicine files, a vulnerability allows the software to read beyond its intended memory boundaries. This can lead to a Denial of Service, causing...

6.5CVSS5.5AI score0.0034EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/24 2:16 a.m.18 views

CVE-2026-25982

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrect...

6.5CVSS0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 2:16 a.m.7 views

DEBIAN-CVE-2026-25982

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrect...

6.5CVSS7.6AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 2:16 a.m.14 views

UBUNTU-CVE-2026-25982

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrect...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/24 1:40 a.m.51 views

CVE-2026-25982 ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrect...

6.5CVSS0.0034EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/02/24 1:40 a.m.10 views

Out-of-bounds Read

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS6AI score0.0034EPSS
SaveExploits0References2
Rows per page
Query Builder