Known vulnerabilities in PACS Server

Known vulnerabilities in PACS Server

Vendor: Santesoft

Software: PACS Server

Software CPE: cpe:2.3:a:santesoft:pacs_server:*:*:*:*:*:*:*:*

Website: https://www.santesoft.com/index.html

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU121967 - NULL Pointer Dereference CVE-2025-14501	CWE-476	Medium	No	No	4.2.3	23.01.2026	SB2026012328
#VU105789 - Access of Uninitialized Pointer CVE-2025-2284	CWE-824	High	No	No	4.2.0	17.03.2025	SB2025031745
#VU105788 - Use of Password Hash With Insufficient Computational Effort CVE-2025-2265	CWE-916	Low	Available	No	4.2.0	17.03.2025	SB2025031745
#VU105787 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-2264	CWE-22	High	Available	Exploited	4.2.0	17.03.2025	SB2025031745
#VU105785 - Stack-based buffer overflow CVE-2025-2263	CWE-121	High	Available	No	4.2.0	17.03.2025	SB2025031745
#VU103096 - Memory corruption CVE-2025-0574	CWE-119	High	No	No	4.0.10	21.01.2025	SB2025012110
#VU103094 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-0572	CWE-22	Low	No	No	4.0.10	21.01.2025	SB2025012110
#VU103093 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-0573	CWE-22	Medium	No	No	4.0.10	21.01.2025	SB2025012110
#VU103092 - Memory corruption CVE-2025-0569	CWE-119	Medium	No	No	4.0.10	21.01.2025	SB2025012110
#VU103091 - Memory corruption CVE-2025-0571	CWE-119	Medium	No	No	4.0.10	21.01.2025	SB2025012110
#VU103090 - Memory corruption CVE-2025-0570	CWE-119	Medium	No	No	4.0.10	21.01.2025	SB2025012110
#VU103089 - Memory corruption CVE-2025-0568	CWE-119	Medium	No	No	4.0.10	21.01.2025	SB2025012110
#VU86803 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-1863	CWE-89	High	No	No	3.3.6	26.02.2024	SB2024022644