orthanc-server kayıtları
orthanc-server üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %92,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read3
- CWE-770 Allocation of Resources Without Limits or Throttling3
- CWE-787 Out-of-bounds Write3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-306 Missing Authentication for Critical Function1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-5442İstismar yok | Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensionsorthanc-server · orthanc · CWE-787 | Kritik9,8 | — | %0,5 | 9 Nis 2026 |
39İzleyin | CVE-2026-5443İstismar yok | Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)orthanc-server · orthanc · CWE-787 | Kritik9,8 | — | %0,5 | 9 Nis 2026 |
37İzleyin | CVE-2025-0896İstismar yok | Orthanc Server Missing Authentication for Critical Functionorthanc-server · orthanc · CWE-306 | Kritik9,2 | — | %2,4 | 12 Şub 2025 |
36İzleyin | CVE-2023-33466İstismar yok | Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specorthanc-server · orthanc · CWE-94 | Yüksek8,8 | — | %4,1 | 29 Haz 2023 |
36İzleyin | CVE-2026-5445İstismar yok | Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)orthanc-server · orthanc · CWE-125 | Kritik9,1 | — | %0,6 | 9 Nis 2026 |
30İzleyin | CVE-2026-5437İstismar yok | Out-of-Bounds Read in DicomStreamReaderorthanc-server · orthanc · CWE-125 | Yüksek7,5 | — | %0,6 | 9 Nis 2026 |
30İzleyin | CVE-2026-5440İstismar yok | Memory Exhaustion via Unbounded Content-Lengthorthanc-server · orthanc · CWE-770 | Yüksek7,5 | — | %0,5 | 9 Nis 2026 |
30İzleyin | CVE-2026-5438İstismar yok | Gzip Decompression Bomb via Content-Encoding Headerorthanc-server · orthanc · CWE-770 | Yüksek7,5 | — | %0,4 | 9 Nis 2026 |
30İzleyin | CVE-2026-5439İstismar yok | Memory Exhaustion via Forged ZIP Metadataorthanc-server · orthanc · CWE-770 | Yüksek7,5 | — | %0,4 | 9 Nis 2026 |
28İzleyin | CVE-2026-5444İstismar yok | Heap Buffer Overflow in PAM Image Buffer Allocationorthanc-server · orthanc · CWE-787 | Yüksek7,1 | — | %0,1 | 9 Nis 2026 |
28İzleyin | CVE-2026-5441İstismar yok | Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)orthanc-server · orthanc · CWE-125 | Yüksek7,1 | — | %0,1 | 9 Nis 2026 |
24İzleyin | CVE-2024-22725İstismar yok | Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability.orthanc-server · orthanc · CWE-79 | Orta6,1 | — | %0,3 | 24 Oca 2024 |
24İzleyin | CVE-2023-7238İstismar yok | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewerorthanc-server · osimis web viewer · CWE-79 | Orta6,1 | — | %0,3 | 23 Oca 2024 |
- CVE-2026-544239İzleyin
Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions
KritikCVSS 9,8İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2026-544339İzleyin
Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)
KritikCVSS 9,8İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2025-089637İzleyin
Orthanc Server Missing Authentication for Critical Function
KritikCVSS 9,2İstismar yokEPSS %2orthanc-server · orthanc12 Şub 2025
- CVE-2023-3346636İzleyin
Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in spec
YüksekCVSS 8,8İstismar yokEPSS %4orthanc-server · orthanc29 Haz 2023
- CVE-2026-544536İzleyin
Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)
KritikCVSS 9,1İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2026-543730İzleyin
Out-of-Bounds Read in DicomStreamReader
YüksekCVSS 7,5İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2026-544030İzleyin
Memory Exhaustion via Unbounded Content-Length
YüksekCVSS 7,5İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2026-543830İzleyin
Gzip Decompression Bomb via Content-Encoding Header
YüksekCVSS 7,5İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2026-543930İzleyin
Memory Exhaustion via Forged ZIP Metadata
YüksekCVSS 7,5İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2026-544428İzleyin
Heap Buffer Overflow in PAM Image Buffer Allocation
YüksekCVSS 7,1İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2026-544128İzleyin
Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)
YüksekCVSS 7,1İstismar yokEPSS %0orthanc-server · orthanc9 Nis 2026
- CVE-2024-2272524İzleyin
Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability.
OrtaCVSS 6,1İstismar yokEPSS %0orthanc-server · orthanc24 Oca 2024
- CVE-2023-723824İzleyin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewer
OrtaCVSS 6,1İstismar yokEPSS %0orthanc-server · osimis web viewer23 Oca 2024