Vulnerabilities

TI-2018-15350 CVE-2018-25124 · GHSA-5f3x-cpqc-wr99

PacsOne Server 6.6.2 DICOM Web Viewer Directory Traversal LFI

HIGH 77

PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0099 Published 2025-11-10 No fix listed CWE-22

TI-2020-17589 CVE-2020-29166 · GHSA-88w2-cjhc-67m3

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file…

LOW 37

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02337 Published 2021-02-03 No fix listed CWE-22

TI-2020-17588 CVE-2020-29165 · GHSA-f935-fh29-4mfr

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access…

MEDIUM 46

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01739 Published 2021-02-03 No fix listed CWE-306

TI-2020-17587 CVE-2020-29164 · GHSA-qj3f-9v2m-79rj

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).

LOW 36

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.06198 Published 2021-02-03 No fix listed CWE-79

TI-2020-17586 CVE-2020-29163 · GHSA-wgxr-4g2j-73wf

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.

MEDIUM 40

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0115 Published 2021-02-03 No fix listed CWE-89

TI-2020-10233 CVE-2020-12869 · GHSA-cw67-prcg-9fwq

RainbowFish PacsOne Server 6.8.4 allows XSS.

LOW 25

RainbowFish PacsOne Server 6.8.4 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00551 Published 2020-09-30 No fix listed CWE-79

TI-2020-10110 CVE-2020-12715 · GHSA-vqf4-g492-5236

RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.

MEDIUM 40

RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01207 Published 2020-09-30 No fix listed CWE-434

TI-2020-10234 CVE-2020-12870 · GHSA-2f4q-74mc-vp6m

RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.

MEDIUM 45

RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01609 Published 2020-09-30 No fix listed CWE-89

Vulnerabilities

Filters