https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T14:00:18.799726+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-25142 CVE-2018-25142 — NovaRad NovaPACS Diagnostics Viewer 8.5 XML External Entity Injection 2026-10-17T14:00:18.801400+00:00

Affected: NovaRad Corporation NovaPACS Diagnostics Viewer

NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings. Attackers can craft malicious XML files with DTD parameter entities to retrieve arbitrary system files through an out-of-band channel attack.