823 matches found
CVE-2023-40150
Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0...
CVE-2023-40150
Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0...
CVE-2023-39227
Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials...
Command injection
?Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials...
CVE-2023-39227
CVE-2023-39227 affects Softneta MedDream PACS; the issue is plaintext storage of usernames and passwords (CWE-256) leading to credential leakage. Connected docs identify affected product and versions: MedDream PACS v7.2.8.810 and earlier. The root cause is insecure plaintext credential storage wi...
CVE-2023-39227 Softneta MedDream PACS Plaintext Storage of a Password
Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials...
CVE-2023-39227 Softneta MedDream PACS Plaintext Storage of a Password
Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials...
CVE-2023-40150
CVE-2023-40150 affects Softneta MedDream PACS. The vulnerability stems from an authentication check omission that allows an attacker to trigger dangerous functionality and potentially achieve unauthenticated remote code execution. Affected product: MedDream PACS (v7.2.8.810 and earlier). Impact p...
CVE-2023-40150 Softneta MedDream PACS Exposed Dangerous Method or Function
Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0...
CVE-2023-40150 Softneta MedDream PACS Exposed Dangerous Method or Function
Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0...
CVE-2023-40150: Exposed Dangerous Method or Function
Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0...
Softneta MedDream PACS Security Breach
Softneta MedDream PACS is a server from Softneta Inc. It is used to store, archive, manage and view medical images. A security vulnerability exists in Softneta MedDream PACS v7.2.8.810 and prior versions, which originates from storing user names and passwords in plaintext. An attacker can exploit...
CVE-2023-39227: Plaintext Storage of a Password
Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials...
PT-2023-26842 · Softneta · Meddream Pacs
Name of the Vulnerable Software and Affected Versions: Softneta MedDream PACS affected versions not specified Description: The issue concerns the storage of usernames and passwords in plaintext. This could be exploited by attackers to leak legitimate users' credentials. Recommendations: At the...
Softneta MedDream PACS Premium
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Softneta Equipment: MedDream PACS Vulnerabilities: Exposed Dangerous Method or Function, Plaintext Storage of a Password 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...
CISA Releases Two Industrial Control Systems Advisories
CISA released two 2 Industrial Control Systems ICS advisories on February 21, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...
CVE-2021-39369
In Philips formerly Carestream Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root...
CVE-2021-39369
In Philips formerly Carestream Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root...
CVE-2021-39369
Philips Vue PACS and Vue MyVue PACS are affected by CVE-2021-39369 via the VideoStream function, which permits path traversal by authenticated users to access files outside the web root. The issue affects Vue PACS/Vue MyVue versions prior to 12.2.x.x. The CVSS base score is 6.5 (Medium) with Conf...