SUSE CVE-2012-0108

Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0086 and CVE-2012-0095...

SUSE CVE-2013-4325

The checkpermissionv1 function in base/pkit.py in HP Linux Imaging and Printing HPLIP through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race conditio...

SUSE CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

SUSE CVE-2014-1932

The 1 loaddjpeg function in JpegImagePlugin.py, 2 Ghostscript function in EpsImagePlugin.py, 3 load function in IptcImagePlugin.py, and 4 copy function in Image.py in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users...

SUSE CVE-2014-1933

The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes...

SUSE CVE-2014-3589

PIL/IcnsImagePlugin.py in Python Imaging Library PIL and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size...

SUSE CVE-2015-0839

The hp-plugin utility in HP Linux Imaging and Printing HPLIP makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads...

SUSE CVE-2016-2533

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

SUSE CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

CVE-2022-38765

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

Input validation

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

PT-2022-24557 · Canon Medical Informatics · Vitrea Vision

Name of the Vulnerable Software and Affected Versions: Canon Medical Informatics Vitrea Vision version 7.7.76.1 Description: The issue is related to inadequate access control enforcement, allowing an authenticated user to gain unauthorized access to imaging records. This can be achieved by...

CVE-2022-38765

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

CVE-2022-38765

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

CVE-2022-38765: Authorization Bypass Through User-Controlled Key

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

PT-2022-36787 · Apache · Apache Commons Imaging

Name of the Vulnerable Software and Affected Versions: Apache Commons Imaging affected versions not specified Description: A security exception occurs in the java.desktop/java.awt.image.DataBufferInt and java.desktop/java.awt.image.Raster.createPackedRaster functions, which are called by the...

apache-commons-imaging:ImagingJpegFuzzer: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=4885302936469504 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingJpegFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-imaging:ImagingGifFuzzer: Security exception in java.base/java.io.ByteArrayOutputStream.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5867734521217024 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingGifFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-imaging:ImagingBmpFuzzer: Security exception in org.apache.commons.imaging.common.ImageBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5649300806041600 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingBmpFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Siemens syngo Dynamics has an unspecified vulnerability (CNVD-2023-03929)

Siemens syngo Dynamics is a cardiovascular imaging and information solution from Siemens, a German company designed to be a centralized digital hub for complete cardiovascular services. Designed to be a centralized digital hub for complete cardiovascular services, Siemens syngo Dynamics has a...