Rainbowfishsoftware - vulnerabilities (CVEs)
8 CVEs in 1 products, 0 in the last 30 days, newest from 2025-11-10.
Products
- Pacsone Server - 8 CVEs
Newest CVEs of Rainbowfishsoftware
- CVE-2018-25124 - CVSS 8.7 (high), 2025-11-10: PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component.…
- CVE-2020-29163 - CVSS 8.8 (high), 2021-02-03: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
- CVE-2020-29166 - CVSS 7.5 (high), 2021-02-03: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
- CVE-2020-29165 - CVSS 9.8 (critical), 2021-02-03: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
- CVE-2020-29164 - CVSS 6.1 (medium), 2021-02-03: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
- CVE-2020-12715 - CVSS 8.8 (high), 2020-09-30: RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
- CVE-2020-12870 - CVSS 9.8 (critical), 2020-09-30: RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
- CVE-2020-12869 - CVSS 5.4 (medium), 2020-09-30: RainbowFish PacsOne Server 6.8.4 allows XSS.
