National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,350 matching advisories
Page 169 of 1,890
CVE-2025-58080 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript cod...

📅 2026-01-20 Inspect Dossier →
CVE-2025-57881 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code...

📅 2026-01-20 Inspect Dossier →
CVE-2025-57787 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code...

📅 2026-01-20 Inspect Dossier →
CVE-2025-57786 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript c...

📅 2026-01-20 Inspect Dossier →
CVE-2025-55071 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript ...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54861 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript c...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54853 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code ...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54852 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript co...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54817 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code e...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54814 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javas...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54778 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript cod...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54495 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript c...

📅 2026-01-20 Inspect Dossier →
CVE-2025-54157 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript ...

📅 2026-01-20 Inspect Dossier →
CVE-2025-53912 CRITICAL 9.6
meddream/pacs_server CWE-73 Remote (AV:N)

An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker ca...

📅 2026-01-20 Inspect Dossier →
CVE-2025-53854 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript c...

📅 2026-01-20 Inspect Dossier →
CVE-2025-53707 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript...

📅 2026-01-20 Inspect Dossier →
CVE-2025-53516 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code...

📅 2026-01-20 Inspect Dossier →
CVE-2025-46270 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascrip...

📅 2026-01-20 Inspect Dossier →
CVE-2025-44000 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript co...

📅 2026-01-20 Inspect Dossier →
CVE-2025-36556 MEDIUM 6.1
meddream/pacs_server CWE-79 Remote (AV:N)

A reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code ex...

📅 2026-01-20 Inspect Dossier →
CVE-2025-1722 MEDIUM 5.9
ibm/concert CWE-244 Remote (AV:N)

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory....

📅 2026-01-20 Inspect Dossier →
CVE-2025-1719 MEDIUM 5.9
ibm/concert CWE-244 Remote (AV:N)

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory....

📅 2026-01-20 Inspect Dossier →
CWE-79 Remote (AV:N)

The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to DOM-Based Cross-Si...

📅 2026-01-20 Inspect Dossier →
CWE-862 Remote (AV:N)

The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability ...

📅 2026-01-20 Inspect Dossier →
Showing Page 169 of 1,890 • 45,350 matching CVEs (out of 396,747 NIST advisories)