51 matches found
CVE-2023-3892
CVE-2023-3892 affects MIM Assistant and MIM Client’s DICOM RTst Loading modules, via an improper restriction of XML External Entity (XXE) references. The root cause is handling of XML that can enable entity expansion when processing 3rd‑party private RTst metadata tags, potentially allowing an at...
MIM Software Code Issues Vulnerabilities
MIM Software is a remote access application from MIM Software, Inc. dedicated to helping customers provide the best possible patient care. A security vulnerability exists in MIM versions 7.2.10 and 7.3.3 that stems from improperly restricting references to XML external entities...
PT-2023-26687 · Unknown · Client Dicom Rtst Loading Modules +1
Name of the Vulnerable Software and Affected Versions: MIM Assistant and Client DICOM RTst Loading modules affected versions not specified Description: The issue concerns an Improper Restriction of XML External Entity Reference, which allows XML Entity Linking or XML External Entity attacks...
CVE-2023-30262
An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service...
Design/Logic Flaw
An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service...
CVE-2023-30262
An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service...
MIM Software 代码问题漏洞
MIM Software is a remote access application from MIM Software, Inc. dedicated to helping customers provide the best possible patient care. A security vulnerability exists in MIM License Server and MIMpacs services. An attacker can exploit the vulnerability to execute arbitrary code via the RMI...
PT-2023-22613 · Mim Software · Mim License Server +1
Name of the Vulnerable Software and Affected Versions: MIM software Inc MIM License Server and MIMpacs services versions 6.9 through 7.0 Description: The issue allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service. Recommendations: For versions 6.9 throug...
CVE-2023-30262
CVE-2023-30262 affects MIM Software, Inc. MIM License Server and MIMpacs services (versions 6.9 through 7.0). The underlying issue enables a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service. The vulnerability is fixed in version 7.0.10. Metrics in public reco...
CVE-2023-30262
An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service...
Medium: Consider alternative price feed + ensure _minLockPeriod > 0 to prevent flash loan attacks
Handle hickuphh3 Vulnerability details Impact It is critical to ensure that minLockPeriod 0 because it is immutable and cannot be changed once set. A zero minLockPeriod will allow for flash loan attacks to occur. Vaults utilising the nonUST strategy are especially susceptible to this attack vecto...
CVE-2022-21672
make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted...
Design/Logic Flaw
make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted...
CVE-2022-21672 /etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca
make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted...
CVE-2022-21672 /etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca
make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted...
CVE-2022-21672
The CVE-2022-21672 issue affects the make-ca utility (versions
CVE-2014-4889
The CVE-2014-4889 entry affects the Android application “Diabetic Diet Guide” (com.wDiabeticDietGuide) version 2.1, where the app does not verify X.509 certificates from SSL servers. This root cause allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...
ESTsoft ALZip MIM File Handling Buffer Overflow
Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...
ESTsoft ALZip MIM File Handling Buffer Overflow
Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...
ESTsoft ALZip MIM File Handling Buffer Overflow
Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...