OFFIS kayıtları
offis üreticisine ait 24 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer5
- CWE-476 NULL Pointer Dereference4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
- CWE-401 Missing Release of Memory after Effective Lifetime3
- CWE-404 Improper Resource Shutdown or Release1
- CWE-415 Double Free1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
24 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2019-1010228İstismar yok | OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.offis · dcmtk · CWE-787 | Kritik9,8 | — | %7,6 | 22 Tem 2019 |
40Planlayın | CVE-2022-2120İstismar yok | OFFIS DCMTK Path Traversaloffis · dcmtk · CWE-23 | Kritik9,8 | — | %3,2 | 24 Haz 2022 |
40Planlayın | CVE-2022-2119İstismar yok | OFFIS DCMTK Path Traversaloffis · dcmtk · CWE-22 | Kritik9,8 | — | %3,2 | 24 Haz 2022 |
32İzleyin | CVE-2024-27628İstismar yok | Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.offis · dcmtk · CWE-120 | Yüksek8,1 | — | %0,7 | 28 Haz 2024 |
31İzleyin | CVE-2021-41689İstismar yok | DCMTK through 3.6.6 does not handle string copy properly.offis · dcmtk · CWE-476 | Yüksek7,5 | — | %2,0 | 28 Haz 2022 |
31İzleyin | CVE-2021-41690İstismar yok | DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-401 | Yüksek7,5 | — | %1,8 | 28 Haz 2022 |
31İzleyin | CVE-2021-41687İstismar yok | DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-401 | Yüksek7,5 | — | %1,8 | 28 Haz 2022 |
31İzleyin | CVE-2021-41688İstismar yok | DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-415 | Yüksek7,5 | — | %1,8 | 28 Haz 2022 |
31İzleyin | CVE-2024-28130İstismar yok | An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-704 | Yüksek7,5 | — | %1,7 | 23 Nis 2024 |
31İzleyin | CVE-2024-52333İstismar yok | An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-119 | Yüksek7,8 | — | %0,6 | 13 Oca 2025 |
31İzleyin | CVE-2024-47796İstismar yok | An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-119 | Yüksek7,8 | — | %0,6 | 13 Oca 2025 |
30İzleyin | CVE-2022-43272İstismar yok | DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.offis · dcmtk · CWE-401 | Yüksek7,5 | — | %1,6 | 2 Ara 2022 |
30İzleyin | CVE-2025-25475İstismar yok | A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) viaoffis · dcmtk · CWE-476 | Yüksek7,5 | — | %0,6 | 18 Şub 2025 |
28İzleyin | CVE-2026-5663İstismar yok | OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injectionoffis · dcmtk · CWE-77 | Orta6,9 | — | %2,8 | 6 Nis 2026 |
28İzleyin | CVE-2013-6825İstismar yok | (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcoffis · dcmtk · CWE-264 | Yüksek7,2 | — | %0,5 | 10 Haz 2014 |
26İzleyin | CVE-2022-2121İstismar yok | OFFIS DCMTK NULL Pointer Dereferenceoffis · dcmtk · CWE-476 | Orta6,5 | — | %0,8 | 24 Haz 2022 |
26İzleyin | CVE-2025-25474İstismar yok | DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.offis · dcmtk · CWE-120 | Orta6,5 | — | %0,4 | 18 Şub 2025 |
21İzleyin | CVE-2024-34509İstismar yok | dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.offis · dcmtk | Orta5,3 | — | %0,7 | 5 May 2024 |
21İzleyin | CVE-2025-2357İstismar yok | DCMTK dcmjpls JPEG-LS Decoder memory corruptionoffis · dcmtk · CWE-119 | Orta5,3 | — | %0,4 | 16 Mar 2025 |
21İzleyin | CVE-2025-25472İstismar yok | A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.offis · dcmtk · CWE-120 | Orta5,3 | — | %0,4 | 18 Şub 2025 |
19İzleyin | CVE-2025-9732İstismar yok | DCMTK dcm2img diybrpxt.h memory corruptionoffis · dcmtk · CWE-119 | Orta4,8 | — | %0,2 | 31 Ağu 2025 |
17İzleyin | CVE-2024-34508İstismar yok | dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.offis · dcmtk · CWE-476 | Orta4,3 | — | %0,7 | 5 May 2024 |
7İzleyin | CVE-2022-4981İstismar yok | DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereferenceoffis · dcmtk · CWE-404 | Düşük1,9 | — | %0,3 | 21 Eki 2025 |
7İzleyin | CVE-2020-36855İstismar yok | DCMTK dcmqrscp parseQuota stack-based overflowoffis · dcmtk · CWE-119 | Düşük1,9 | — | %0,2 | 21 Eki 2025 |
- CVE-2019-101022841Planlayın
OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.
KritikCVSS 9,8İstismar yokEPSS %8offis · dcmtk22 Tem 2019
- CVE-2022-212040Planlayın
OFFIS DCMTK Path Traversal
KritikCVSS 9,8İstismar yokEPSS %3offis · dcmtk24 Haz 2022
- CVE-2022-211940Planlayın
OFFIS DCMTK Path Traversal
KritikCVSS 9,8İstismar yokEPSS %3offis · dcmtk24 Haz 2022
- CVE-2024-2762832İzleyin
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.
YüksekCVSS 8,1İstismar yokEPSS %1offis · dcmtk28 Haz 2024
- CVE-2021-4168931İzleyin
DCMTK through 3.6.6 does not handle string copy properly.
YüksekCVSS 7,5İstismar yokEPSS %2offis · dcmtk28 Haz 2022
- CVE-2021-4169031İzleyin
DCMTK through 3.6.6 does not handle memory free properly.
YüksekCVSS 7,5İstismar yokEPSS %2offis · dcmtk28 Haz 2022
- CVE-2021-4168731İzleyin
DCMTK through 3.6.6 does not handle memory free properly.
YüksekCVSS 7,5İstismar yokEPSS %2offis · dcmtk28 Haz 2022
- CVE-2021-4168831İzleyin
DCMTK through 3.6.6 does not handle memory free properly.
YüksekCVSS 7,5İstismar yokEPSS %2offis · dcmtk28 Haz 2022
- CVE-2024-2813031İzleyin
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.
YüksekCVSS 7,5İstismar yokEPSS %2offis · dcmtk23 Nis 2024
- CVE-2024-5233331İzleyin
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.
YüksekCVSS 7,8İstismar yokEPSS %1offis · dcmtk13 Oca 2025
- CVE-2024-4779631İzleyin
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.
YüksekCVSS 7,8İstismar yokEPSS %1offis · dcmtk13 Oca 2025
- CVE-2022-4327230İzleyin
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
YüksekCVSS 7,5İstismar yokEPSS %2offis · dcmtk2 Ara 2022
- CVE-2025-2547530İzleyin
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via
YüksekCVSS 7,5İstismar yokEPSS %1offis · dcmtk18 Şub 2025
- CVE-2026-566328İzleyin
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
OrtaCVSS 6,9İstismar yokEPSS %3offis · dcmtk6 Nis 2026
- CVE-2013-682528İzleyin
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrc
YüksekCVSS 7,2İstismar yokEPSS %0offis · dcmtk10 Haz 2014
- CVE-2022-212126İzleyin
OFFIS DCMTK NULL Pointer Dereference
OrtaCVSS 6,5İstismar yokEPSS %1offis · dcmtk24 Haz 2022
- CVE-2025-2547426İzleyin
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
OrtaCVSS 6,5İstismar yokEPSS %0offis · dcmtk18 Şub 2025
- CVE-2024-3450921İzleyin
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
OrtaCVSS 5,3İstismar yokEPSS %1offis · dcmtk5 May 2024
- CVE-2025-235721İzleyin
DCMTK dcmjpls JPEG-LS Decoder memory corruption
OrtaCVSS 5,3İstismar yokEPSS %0offis · dcmtk16 Mar 2025
- CVE-2025-2547221İzleyin
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
OrtaCVSS 5,3İstismar yokEPSS %0offis · dcmtk18 Şub 2025
- CVE-2025-973219İzleyin
DCMTK dcm2img diybrpxt.h memory corruption
OrtaCVSS 4,8İstismar yokEPSS %0offis · dcmtk31 Ağu 2025
- CVE-2024-3450817İzleyin
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
OrtaCVSS 4,3İstismar yokEPSS %1offis · dcmtk5 May 2024
- CVE-2022-49817İzleyin
DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
DüşükCVSS 1,9İstismar yokEPSS %0offis · dcmtk21 Eki 2025
- CVE-2020-368557İzleyin
DCMTK dcmqrscp parseQuota stack-based overflow
DüşükCVSS 1,9İstismar yokEPSS %0offis · dcmtk21 Eki 2025