<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: santesoft</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-2034: Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-2034.html</link><guid>https://patchthecve.com/cve/CVE-2026-2034.html</guid><pubDate>Wed, 17 Jun 2026 10:30:10 +0000</pubDate><description>HIGH 7.8: Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must vi</description></item><item><title>CVE-2025-5481: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-5481.html</link><guid>https://patchthecve.com/cve/CVE-2025-5481.html</guid><pubDate>Wed, 17 Jun 2026 09:48:00 +0000</pubDate><description>HIGH 7.8: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus</description></item><item><title>CVE-2025-5307: Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-5307.html</link><guid>https://patchthecve.com/cve/CVE-2025-5307.html</guid><pubDate>Wed, 17 Jun 2026 09:47:39 +0000</pubDate><description>HIGH 7.8: Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability. A local attacker could exploit this issue to potentially disclose information and to execute arbitrary code on affected installations of Sante DICOM Viewer Pro.</description></item><item><title>CVE-2025-2480: Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a mali</title><link>https://patchthecve.com/cve/CVE-2025-2480.html</link><guid>https://patchthecve.com/cve/CVE-2025-2480.html</guid><pubDate>Wed, 17 Jun 2026 09:07:02 +0000</pubDate><description>HIGH 7.8: Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution of arbitrary code by a local attacker.</description></item><item><title>CVE-2025-2264: A Path Traversal Information Disclosure vulnerability exists in &quot;Sante PACS Server.exe&quot;</title><link>https://patchthecve.com/cve/CVE-2025-2264.html</link><guid>https://patchthecve.com/cve/CVE-2025-2264.html</guid><pubDate>Wed, 17 Jun 2026 09:06:39 +0000</pubDate><description>HIGH 7.5: A Path Traversal Information Disclosure vulnerability exists in &quot;Sante PACS Server.exe&quot;. An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.</description></item><item><title>CVE-2025-2263: During login to the web server in &quot;Sante PACS Server.exe&quot;, OpenSSL function EVP_DecryptUpdate is called to dec</title><link>https://patchthecve.com/cve/CVE-2025-2263.html</link><guid>https://patchthecve.com/cve/CVE-2025-2263.html</guid><pubDate>Wed, 17 Jun 2026 09:06:39 +0000</pubDate><description>CRITICAL 9.8: During login to the web server in &quot;Sante PACS Server.exe&quot;, OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or pass</description></item><item><title>CVE-2025-0574: Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-0574.html</link><guid>https://patchthecve.com/cve/CVE-2025-0574.html</guid><pubDate>Wed, 17 Jun 2026 08:26:44 +0000</pubDate><description>HIGH 7.5: Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw exists wit</description></item><item><title>CVE-2025-0573: Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-0573.html</link><guid>https://patchthecve.com/cve/CVE-2025-0573.html</guid><pubDate>Wed, 17 Jun 2026 08:26:44 +0000</pubDate><description>MEDIUM 5.3: Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw exists with</description></item><item><title>CVE-2025-0572: Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-0572.html</link><guid>https://patchthecve.com/cve/CVE-2025-0572.html</guid><pubDate>Wed, 17 Jun 2026 08:26:44 +0000</pubDate><description>MEDIUM 4.3: Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.

The specific flaw exis</description></item><item><title>CVE-2025-0571: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-0571.html</link><guid>https://patchthecve.com/cve/CVE-2025-0571.html</guid><pubDate>Wed, 17 Jun 2026 08:26:44 +0000</pubDate><description>MEDIUM 6.5: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.

The specific </description></item><item><title>CVE-2025-0570: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-0570.html</link><guid>https://patchthecve.com/cve/CVE-2025-0570.html</guid><pubDate>Wed, 17 Jun 2026 08:26:43 +0000</pubDate><description>MEDIUM 6.5: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.

The specific </description></item><item><title>CVE-2025-0569: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-0569.html</link><guid>https://patchthecve.com/cve/CVE-2025-0569.html</guid><pubDate>Wed, 17 Jun 2026 08:26:43 +0000</pubDate><description>HIGH 7.5: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw ex</description></item><item><title>CVE-2025-0568: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-0568.html</link><guid>https://patchthecve.com/cve/CVE-2025-0568.html</guid><pubDate>Wed, 17 Jun 2026 08:26:43 +0000</pubDate><description>HIGH 7.5: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw ex</description></item><item><title>CVE-2023-51637: Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-51637.html</link><guid>https://patchthecve.com/cve/CVE-2023-51637.html</guid><pubDate>Wed, 17 Jun 2026 06:41:22 +0000</pubDate><description>CRITICAL 9.8: Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability.

The specific flaw exists within</description></item><item><title>CVE-2023-35734: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-35734.html</link><guid>https://patchthecve.com/cve/CVE-2023-35734.html</guid><pubDate>Wed, 17 Jun 2026 06:05:06 +0000</pubDate><description>MEDIUM 6.5: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target</description></item><item><title>CVE-2023-34297: Sante DICOM Viewer Pro JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-34297.html</link><guid>https://patchthecve.com/cve/CVE-2023-34297.html</guid><pubDate>Wed, 17 Jun 2026 06:03:19 +0000</pubDate><description>HIGH 8.8: Sante DICOM Viewer Pro JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus</description></item><item><title>CVE-2023-34296: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-34296.html</link><guid>https://patchthecve.com/cve/CVE-2023-34296.html</guid><pubDate>Wed, 17 Jun 2026 06:03:19 +0000</pubDate><description>HIGH 8.8: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus</description></item><item><title>CVE-2023-34295: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-34295.html</link><guid>https://patchthecve.com/cve/CVE-2023-34295.html</guid><pubDate>Wed, 17 Jun 2026 06:03:19 +0000</pubDate><description>HIGH 8.8: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus</description></item><item><title>CVE-2023-34294: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-34294.html</link><guid>https://patchthecve.com/cve/CVE-2023-34294.html</guid><pubDate>Wed, 17 Jun 2026 06:03:19 +0000</pubDate><description>MEDIUM 6.5: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target</description></item><item><title>CVE-2023-32135: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-32135.html</link><guid>https://patchthecve.com/cve/CVE-2023-32135.html</guid><pubDate>Wed, 17 Jun 2026 05:58:09 +0000</pubDate><description>MEDIUM 6.5: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target</description></item><item><title>CVE-2023-32134: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-32134.html</link><guid>https://patchthecve.com/cve/CVE-2023-32134.html</guid><pubDate>Wed, 17 Jun 2026 05:58:09 +0000</pubDate><description>HIGH 8.8: Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must vis</description></item><item><title>CVE-2023-32133: Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-32133.html</link><guid>https://patchthecve.com/cve/CVE-2023-32133.html</guid><pubDate>Wed, 17 Jun 2026 05:58:09 +0000</pubDate><description>HIGH 8.8: Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus</description></item><item><title>CVE-2023-32132: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-32132.html</link><guid>https://patchthecve.com/cve/CVE-2023-32132.html</guid><pubDate>Wed, 17 Jun 2026 05:58:09 +0000</pubDate><description>HIGH 8.8: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus</description></item><item><title>CVE-2023-32131: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-32131.html</link><guid>https://patchthecve.com/cve/CVE-2023-32131.html</guid><pubDate>Wed, 17 Jun 2026 05:58:08 +0000</pubDate><description>HIGH 8.8: Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus</description></item><item><title>CVE-2024-1863: Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-1863.html</link><guid>https://patchthecve.com/cve/CVE-2024-1863.html</guid><pubDate>Wed, 17 Jun 2026 07:05:10 +0000</pubDate><description>CRITICAL 9.8: Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the </description></item><item><title>CVE-2024-1696: In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT</title><link>https://patchthecve.com/cve/CVE-2024-1696.html</link><guid>https://patchthecve.com/cve/CVE-2024-1696.html</guid><pubDate>Wed, 17 Jun 2026 07:04:48 +0000</pubDate><description>HIGH 7.8: In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacker could perform an out-of-bounds write, which could allow for arbitrary code execution.

</description></item><item><title>CVE-2024-1453: 
In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could all</title><link>https://patchthecve.com/cve/CVE-2024-1453.html</link><guid>https://patchthecve.com/cve/CVE-2024-1453.html</guid><pubDate>Wed, 17 Jun 2026 07:04:16 +0000</pubDate><description>HIGH 7.8: 
In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code.

</description></item></channel></rss>