https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:53:12.998539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-250180 EUVD-2026-250180 2026-10-03T21:53:13.001190+00:00 EUVD-2026-250180 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54862 fkie_cve-2025-54862 2026-10-03T21:53:13.001223+00:00

Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.

 https://cve.radiocsirt.org/vuln/ghsa-cxx7-9848-h23g GHSA-cxx7-9848-h23g 2026-10-03T21:53:13.001253+00:00

Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.

 https://cve.radiocsirt.org/vuln/icsma-25-224-01 ICSMA-25-224-01 — Santesoft Sante PACS Server 2026-10-03T21:53:13.001270+00:00

Sante PACS Server Web Portal allows remote attackers utilize DCM files to create arbitrary files on affected installations of Sante PACS Server. The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required. The Sante PACS Server Web Portal sends credential information without encryption. Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie. Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.