Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Pixmeo Clear all filters
TI-2025-20514 CVE-2025-27720 · GHSA-j5r6-pp4x-vxpq

Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information

Priority MEDIUM 42

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00305 Published 2025-05-08 No fix listed CWE-319
TI-2025-23079 CVE-2025-31946 · GHSA-m38h-87r3-2882

Pixmeo OsiriX MD Use After Free

Priority LOW 30

Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00293 Published 2025-05-08 No fix listed CWE-416
TI-2025-20393 CVE-2025-27578 · GHSA-m62j-8cr2-x42v

Pixmeo OsiriX MD Use After Free

Priority MEDIUM 46

Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00989 Published 2025-05-08 No fix listed CWE-416