https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2264.htmlhttps://patchthecve.com/cve/CVE-2025-2264.htmlWed, 17 Jun 2026 09:06:39 +0000HIGH 7.5: A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.https://patchthecve.com/cve/CVE-2025-2263.htmlhttps://patchthecve.com/cve/CVE-2025-2263.htmlWed, 17 Jun 2026 09:06:39 +0000CRITICAL 9.8: During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or passhttps://patchthecve.com/cve/CVE-2025-0574.htmlhttps://patchthecve.com/cve/CVE-2025-0574.htmlWed, 17 Jun 2026 08:26:44 +0000HIGH 7.5: Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists withttps://patchthecve.com/cve/CVE-2025-0573.htmlhttps://patchthecve.com/cve/CVE-2025-0573.htmlWed, 17 Jun 2026 08:26:44 +0000MEDIUM 5.3: Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists withhttps://patchthecve.com/cve/CVE-2025-0572.htmlhttps://patchthecve.com/cve/CVE-2025-0572.htmlWed, 17 Jun 2026 08:26:44 +0000MEDIUM 4.3: Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability. The specific flaw exishttps://patchthecve.com/cve/CVE-2025-0571.htmlhttps://patchthecve.com/cve/CVE-2025-0571.htmlWed, 17 Jun 2026 08:26:44 +0000MEDIUM 6.5: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability. The specific https://patchthecve.com/cve/CVE-2025-0570.htmlhttps://patchthecve.com/cve/CVE-2025-0570.htmlWed, 17 Jun 2026 08:26:43 +0000MEDIUM 6.5: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability. The specific https://patchthecve.com/cve/CVE-2025-0569.htmlhttps://patchthecve.com/cve/CVE-2025-0569.htmlWed, 17 Jun 2026 08:26:43 +0000HIGH 7.5: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exhttps://patchthecve.com/cve/CVE-2025-0568.htmlhttps://patchthecve.com/cve/CVE-2025-0568.htmlWed, 17 Jun 2026 08:26:43 +0000HIGH 7.5: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exhttps://patchthecve.com/cve/CVE-2023-51637.htmlhttps://patchthecve.com/cve/CVE-2023-51637.htmlWed, 17 Jun 2026 06:41:22 +0000CRITICAL 9.8: Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability. The specific flaw exists withinhttps://patchthecve.com/cve/CVE-2024-1863.htmlhttps://patchthecve.com/cve/CVE-2024-1863.htmlWed, 17 Jun 2026 07:05:10 +0000CRITICAL 9.8: Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the