CVE-2025-10350 SQL injection in CGM NETRAAD

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9....

PT-2026-22572

Name of the Vulnerable Software and Affected Versions CGM NETRAAD versions prior to 7.9.0 Description A SQL Injection issue exists in the "imageserver" module when processing C-FIND queries. This affects CGM NETRAAD software and potentially allows an attacker connected to a PACS system to gain...

EUVD-2023-45259

Malicious code in bioql PyPI...

CVE-2025-27721: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthorized access to system resources...

File Upload Vulnerability in PACS System of Infinera Software (Shanghai) Co.

Infinera is a company specializing in the development of medical imaging systems. A file upload vulnerability exists in the PACS system of Infida Software Shanghai Co. Ltd. that can be exploited by an attacker to gain server privileges...

CVE-2021-27497

Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product...