MedDream kayıtları
meddream üreticisine ait 38 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')29
- CWE-121 Stack-based Buffer Overflow4
- CWE-522 Insufficiently Protected Credentials1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-918 Server-Side Request Forgery (SSRF)1
- CWE-73 External Control of File Name or Path1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
38 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-3484İstismar yok | MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitymeddream · pacs server · CWE-121 | Kritik9,8 | — | %1,0 | 21 May 2025 |
39İzleyin | CVE-2025-26469İstismar yok | An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3meddream · pacs server · CWE-732 | Kritik9,8 | — | %0,5 | 28 Tem 2025 |
39İzleyin | CVE-2025-27724İstismar yok | A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840.meddream · pacs server · CWE-284 | Kritik9,8 | — | %0,5 | 28 Tem 2025 |
33İzleyin | CVE-2025-24485İstismar yok | A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860.meddream · pacs server · CWE-918 | Yüksek7,5 | — | %8,8 | 28 Tem 2025 |
32İzleyin | CVE-2025-53912İstismar yok | An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-73 | Yüksek8,1 | — | %0,6 | 20 Oca 2026 |
31İzleyin | CVE-2025-3482İstismar yok | MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitymeddream · pacs server · CWE-121 | Yüksek7,8 | — | %0,6 | 21 May 2025 |
31İzleyin | CVE-2025-3481İstismar yok | MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitymeddream · pacs server · CWE-121 | Yüksek7,8 | — | %0,6 | 21 May 2025 |
31İzleyin | CVE-2025-3483İstismar yok | MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitymeddream · pacs server · CWE-121 | Yüksek7,8 | — | %0,6 | 21 May 2025 |
26İzleyin | CVE-2025-3480İstismar yok | MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerabilitymeddream · pacs server · CWE-522 | Orta6,5 | — | %0,1 | 21 May 2025 |
24İzleyin | CVE-2025-32731İstismar yok | A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7meddream · pacs server · CWE-79 | Orta6,1 | — | %0,7 | 28 Tem 2025 |
24İzleyin | CVE-2025-54852İstismar yok | A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,4 | 20 Oca 2026 |
24İzleyin | CVE-2025-57787İstismar yok | A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,4 | 20 Oca 2026 |
24İzleyin | CVE-2025-55071İstismar yok | A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,4 | 20 Oca 2026 |
24İzleyin | CVE-2025-53707İstismar yok | A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,3 | 20 Oca 2026 |
24İzleyin | CVE-2025-44000İstismar yok | A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,3 | 20 Oca 2026 |
24İzleyin | CVE-2025-53516İstismar yok | A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,3 | 20 Oca 2026 |
24İzleyin | CVE-2025-58095İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,3 | 20 Oca 2026 |
24İzleyin | CVE-2025-58087İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,3 | 20 Oca 2026 |
24İzleyin | CVE-2025-58092İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,2 | 20 Oca 2026 |
24İzleyin | CVE-2025-58093İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,2 | 20 Oca 2026 |
24İzleyin | CVE-2025-58094İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,2 | 20 Oca 2026 |
24İzleyin | CVE-2025-58091İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,2 | 20 Oca 2026 |
24İzleyin | CVE-2025-58088İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,2 | 20 Oca 2026 |
24İzleyin | CVE-2025-58089İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,2 | 20 Oca 2026 |
24İzleyin | CVE-2025-58090İstismar yok | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.meddream · pacs server · CWE-79 | Orta6,1 | — | %0,2 | 20 Oca 2026 |
- CVE-2025-348439İzleyin
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1meddream · pacs server21 May 2025
- CVE-2025-2646939İzleyin
An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3
KritikCVSS 9,8İstismar yokEPSS %0meddream · pacs server28 Tem 2025
- CVE-2025-2772439İzleyin
A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840.
KritikCVSS 9,8İstismar yokEPSS %0meddream · pacs server28 Tem 2025
- CVE-2025-2448533İzleyin
A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860.
YüksekCVSS 7,5İstismar yokEPSS %8meddream · pacs server28 Tem 2025
- CVE-2025-5391232İzleyin
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.
YüksekCVSS 8,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-348231İzleyin
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0meddream · pacs server21 May 2025
- CVE-2025-348131İzleyin
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0meddream · pacs server21 May 2025
- CVE-2025-348331İzleyin
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0meddream · pacs server21 May 2025
- CVE-2025-348026İzleyin
MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0meddream · pacs server21 May 2025
- CVE-2025-3273124İzleyin
A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server28 Tem 2025
- CVE-2025-5485224İzleyin
A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5778724İzleyin
A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5507124İzleyin
A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5370724İzleyin
A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-4400024İzleyin
A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5351624İzleyin
A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5809524İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5808724İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5809224İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5809324İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5809424İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5809124İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5808824İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5808924İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026
- CVE-2025-5809024İzleyin
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.
OrtaCVSS 6,1İstismar yokEPSS %0meddream · pacs server20 Oca 2026