Lucene search
+L

187 matches found

CVE
CVE
added 2025/05/22 12:51 a.m.52 views

CVE-2025-3483

CVE-2025-3483 affects MedDream PACS Server. The vulnerability is a stack-based buffer overflow in the DICOM file parsing logic caused by insufficient validation of user-supplied data length before copying into a fixed-size stack buffer. This leads to remote code execution with the service account...

9.8CVSS9.9AI score0.00524EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/22 12:51 a.m.8 views

CVE-2025-3484 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specif...

9.8CVSS9.9AI score0.00845EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/22 12:51 a.m.15 views

CVE-2025-3484 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specif...

9.8CVSS0.00845EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/22 12:51 a.m.51 views

CVE-2025-3484

CVE-2025-3484 is a MedDream PACS Server vulnerability where the DICOM file parsing logic lacks proper validation of user-supplied data length, allowing stack-based buffer overflow that leads to remote code execution. The flaw enables unauthenticated, network-based exploitation with high impact on...

9.8CVSS9.9AI score0.00845EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.4 views

MedDream PACS Server 安全漏洞

MedDream PACS Server is an image archiving and communication system from MedDream, Inc. It is used to store, archive, manage and view medical images. A security vulnerability exists in MedDream PACS Server versions prior to 7.3.5.860, which stems from a stack buffer overflow issue with DICOM file...

9.8CVSS9.9AI score0.00524EPSS
SaveExploits0References1
Metasploit
Metasploit
added 2025/05/06 6:54 p.m.351 views

Sante PACS Server Path Traversal (CVE-2025-2264)

This module exploits a path traversal vulnerability CVE-2025-2264 in Sante PACS Server use auxiliary/gather/pacsservertraversal msf auxiliarypacsservertraversal show actions ...actions... msf auxiliarypacsservertraversal set ACTION msf auxiliarypacsservertraversal show options ...show and set...

7.5CVSS7.4AI score0.38656EPSS
SaveExploits2
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.13 views

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

9.8CVSS7.4AI score0.00845EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.9 views

PT-2025-15883 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

9.8CVSS9.8AI score0.00524EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.18 views

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

9.8CVSS7.4AI score0.00524EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.8 views

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

9.8CVSS7.4AI score0.00524EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.8 views

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

9.8CVSS7.4AI score0.00524EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.11 views

PT-2025-15881 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

9.8CVSS9.8AI score0.00524EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/04/09 12:0 a.m.13 views

Sante PACS Server Path Traversal (CVE-2025-2264)

Binary data santepacsservercve-2025-2264.nbin...

7.5CVSS7AI score0.38656EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2025/04/09 12:0 a.m.9 views

Sante PACS Server Web Detection

Binary data santepacsserverwebdetect.nbin...

7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.10 views

PT-2025-15884 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

9.8CVSS9.8AI score0.00845EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.12 views

PT-2025-15882 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

9.8CVSS9.8AI score0.00524EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/03/21 12:0 a.m.10 views

The vulnerability of the EVP_DecryptUpdate function in the OpenSSL library of the Sante PACS Server web server allows a hacker to execute arbitrary code.

The vulnerability of the EVPDecryptUpdate function in the OpenSSL library of the Sante PACS Server web server system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending specially crafte...

10CVSS8.1AI score0.00851EPSS
SaveExploits2References3Affected Software1
CNVD
CNVD
added 2025/03/17 12:0 a.m.15 views

Sante PACS Server EVP_DecryptUpdate Buffer Overflow Vulnerability

Sante PACS Server is a medical image management software developed for doctors to view CT in their daily consultations and improve the diagnosis rate. A buffer overflow vulnerability exists in the Sante PACS Server WEB service's EVPDecryptUpdate function that handles usernames and passwords, whic...

9.8CVSS8.1AI score0.00851EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/03/15 5:7 p.m.13 views

CVE-2025-2264

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed...

7.5CVSS7.2AI score0.38656EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/03/15 5:5 p.m.9 views

CVE-2025-2284

A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe"...

7.5CVSS7.1AI score0.05673EPSS
SaveExploits0References1
Rows per page
Query Builder