Readymedia Project Readymedia
6 CVEs affecting Readymedia Project Readymedia. Latest disclosed: 2024-03-25. Critical: 4, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33476 | Critical | 9.8 | 2023-06-02 | ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handlin… |
CVE-2020-28926 | Critical | 9.8 | 2020-11-30 | ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked… |
CVE-2013-2739 | Critical | 9.8 | 2019-11-01 | MiniDLNA has heap-based buffer overflow |
CVE-2013-2738 | Critical | 9.8 | 2019-11-01 | minidlna has SQL Injection that may allow retrieval of arbitrary files |
CVE-2023-47430 | High | 7.5 | 2024-03-25 | Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer() function at tivo_… |
CVE-2022-26505 | High | 7.4 | 2022-03-06 | A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. |