Filtered by vendor Rainbowfishsoftware Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-29164 1 Rainbowfishsoftware 1 Pacsone Server 2024-08-04 6.1 Medium
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
CVE-2020-29166 1 Rainbowfishsoftware 1 Pacsone Server 2024-08-04 7.5 High
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
CVE-2020-29165 1 Rainbowfishsoftware 1 Pacsone Server 2024-08-04 9.8 Critical
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
CVE-2020-29163 1 Rainbowfishsoftware 1 Pacsone Server 2024-08-04 8.8 High
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
CVE-2020-12870 1 Rainbowfishsoftware 1 Pacsone Server 2024-08-04 9.8 Critical
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
CVE-2020-12869 1 Rainbowfishsoftware 1 Pacsone Server 2024-08-04 5.4 Medium
RainbowFish PacsOne Server 6.8.4 allows XSS.
CVE-2020-12715 1 Rainbowfishsoftware 1 Pacsone Server 2024-08-04 8.8 High
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.