Vulnerabilities

Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability.

Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability.

Sante PACS Server is vulnerable to stored cross-site scripting.

Sante PACS Server web portal is vulnerable to stored cross-site scripting.

The Sante PACS Server Web Portal sends credential information without encryption.

The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition.

Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability.

Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution of arbitrary code by a local attacker.

A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe".

The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db.

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe".

During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password.

Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability.

Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability.

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability.

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability.

Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability.

Sante DICOM Viewer Pro JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.