Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2841▼ 157 respecto a la semana anterior
Críticas / altas1370▲ 51 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior
–

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaAlta (8.7)0.92%—Rainbowfishsoftware Pacsone ServerAI10/11/202517/6/2026
PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component. Successful exploitation allows a remote unauthenticated attacker to read arbitrary files via the 'nocache.php' endpoint with a crafted 'path' parameter.…
ModificadaAlta (7.5)2.3%—Rainbowfishsoftware Pacsone Server3/2/202117/6/2026
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
ModificadaCrítica (9.8)1.7%—Rainbowfishsoftware Pacsone Server3/2/202117/6/2026
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
ModificadaMedia (6.1)6.2%—Rainbowfishsoftware Pacsone Server3/2/202117/6/2026
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
ModificadaAlta (8.8)1.1%—Rainbowfishsoftware Pacsone Server3/2/202117/6/2026
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
ModificadaCrítica (9.8)1.6%—Rainbowfishsoftware Pacsone Server30/9/202017/6/2026
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
ModificadaMedia (5.4)0.55%—Rainbowfishsoftware Pacsone Server30/9/202017/6/2026
RainbowFish PacsOne Server 6.8.4 allows XSS.
ModificadaAlta (8.8)1.2%—Rainbowfishsoftware Pacsone Server30/9/202017/6/2026
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.