https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 16:26:40 +0000 https://cve.radiocsirt.org/vuln/cve-2018-25142 <p><strong>Affected:</strong> NovaRad Corporation NovaPACS Diagnostics Viewer</p> <p>NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings. Attackers can craft malicious XML files with DTD parameter entities to retrieve arbitrary system files through an out-of-band channel attack.</p> <p><strong>Affected:</strong> NovaRad Corporation NovaPACS Diagnostics Viewer</p> <p>NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings. Attackers can craft malicious XML files with DTD parameter entities to retrieve arbitrary system files through an out-of-band channel attack.</p> https://cve.radiocsirt.org/vuln/cve-2018-25142