Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MeddreamPacs Server

9 matches found

CVE
CVE•added 2025/05/22 1:15 a.m.•37 views

CVE-2025-3481

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS9.9AI score0.00145EPSS
CVE
CVE•added 2025/05/22 1:15 a.m.•35 views

CVE-2025-3480

MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to exploit this vulnera...

6.5CVSS5.9AI score0.00008EPSS
CVE
CVE•added 2025/05/22 1:15 a.m.•35 views

CVE-2025-3482

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS9.9AI score0.00145EPSS
CVE
CVE•added 2025/05/22 1:15 a.m.•35 views

CVE-2025-3484

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS9.9AI score0.00441EPSS
CVE
CVE•added 2025/05/22 1:15 a.m.•32 views

CVE-2025-3483

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS9.9AI score0.00145EPSS
CVE
CVE•added 2025/07/28 2:15 p.m.•9 views

CVE-2025-26469

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840.A specially crafted application can decrypt credentials stored in a configuration-related registry key.An attacker can execute a malicious script or appli...

9.8CVSS6.2AI score0.00055EPSS
CVE
CVE•added 2025/07/28 2:15 p.m.•8 views

CVE-2025-27724

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.

9.8CVSS6.6AI score0.00053EPSS
CVE
CVE•added 2025/07/28 2:15 p.m.•5 views

CVE-2025-24485

A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

7.5CVSS6.5AI score0.00052EPSS
CVE
CVE•added 2025/07/28 2:15 p.m.•5 views

CVE-2025-32731

A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerabilit...

6.1CVSS6.2AI score0.00054EPSS