https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:20:07.559908+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03841 bdu:2023-03841 2026-10-07T20:20:07.566721+00:00 bdu:2023-03841 https://cve.radiocsirt.org/vuln/euvd-2026-257660 EUVD-2026-257660 2026-10-07T20:20:07.566755+00:00 EUVD-2026-257660 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2120 fkie_cve-2022-2120 2026-10-07T20:20:07.566769+00:00

OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-9hc9-vchg-8p47 GHSA-9hc9-vchg-8p47 2026-10-07T20:20:07.566798+00:00

OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2022-2120 gsd-2022-2120 2026-10-07T20:20:07.566814+00:00 gsd-2022-2120 https://cve.radiocsirt.org/vuln/icsma-22-174-01 ICSMA-22-174-01 — OFFIS DCMTK 2026-10-07T20:20:07.566824+00:00

The affected product 's service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.CVE-2022-2119 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product 's service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.CVE-2022-2120 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.CVE-2022-2121 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:10144-1 openSUSE-SU-2022:10144-1 — Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer 2026-10-07T20:20:07.566850+00:00

Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2120 UBUNTU-CVE-2022-2120 2026-10-07T20:20:07.566866+00:00

Affected: Ubuntu:Pro:16.04:LTS: dcmtk, Ubuntu:Pro:18.04:LTS: dcmtk, Ubuntu:Pro:20.04:LTS: dcmtk, Ubuntu:Pro:22.04:LTS: dcmtk, Ubuntu:Pro:24.04:LTS: dcmtk, Ubuntu:25.10: dcmtk, Ubuntu:26.04:LTS: dcmtk

OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.