Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

223 matches found

Packet Storm
Packet Storm•added 2019/02/22 12:00 a.m.•126 views

Tautulli 2.1.26 Cross Site Scripting

Tautulli https://tautulli.com/ is a Python based monitoring and tracking tool for Plex Media Server. We discovered that an authenticated Plex Media Server user could change their Plex username to include JavaScript and Tautulli would fail to sanitize the username so that when the Plex Media Serve...

4.3CVSS0.1AI score0.0109EPSS
SaveExploits2
PyPA
PyPA•added 2019/02/19 4:29 p.m.•13 views

PYSEC-2019-255

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...

6.1CVSS6.1AI score0.0109EPSS
SaveExploits2References5Affected Software1
OSV
OSV•added 2019/02/19 4:29 p.m.•6 views

PYSEC-2019-255

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...

6.1CVSS5.8AI score
SaveExploits0References2
Cvelist
Cvelist•added 2019/02/19 4:00 p.m.•34 views

CVE-2019-8939

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...

5.9AI score0.0109EPSS
SaveExploits2References2
CVE
CVE•added 2019/02/19 4:00 p.m.•56 views

CVE-2019-8939

Tautulli 2.1.26 is affected by a reflected XSS in data/interfaces/default/history.html when a crafted Plex username is mishandled during History page construction. The vulnerability could allow JavaScript execution in the context of the Plex server administrator if a user’s username contains inje...

6.1CVSS5.8AI score0.0109EPSS
SaveExploits2References2Affected Software1
Tenable Nessus
Tenable Nessus•added 2018/09/12 12:00 a.m.•45 views

FreeBSD : Plex Media Server -- Information Disclosure Vulnerability (337960ec-b5dc-11e8-ac58-a4badb2f4699)

Chris reports : The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External Entity Processing XXE attack. Unauthenticated attackers on the same LAN can use this vulnerability to : - Access arbitrary files from the filesystem with the same permission as...

9.8CVSS8.6AI score0.31809EPSS
SaveExploits5References3
NVD
NVD•added 2018/08/13 5:29 p.m.•28 views

CVE-2018-13415

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...

9.8CVSS9.8AI score0.31809EPSS
SaveExploits5References2
OSV
OSV•added 2018/08/13 5:29 p.m.•11 views

CVE-2018-13415

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...

9.8CVSS5.9AI score0.31809EPSS
SaveExploits5References2
Prion
Prion•added 2018/08/13 5:29 p.m.•21 views

Xxe

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...

7.5CVSS9.6AI score0.31809EPSS
SaveExploits5References2Affected Software1
CVE
CVE•added 2018/08/13 5:00 p.m.•85 views

CVE-2018-13415

CVE-2018-13415 affects Plex Media Server 1.13.2.5154, specifically the XML parsing engine used for SSDP/UPnP. The vulnerability is an XML External Entity Processing (XXE) flaw that allows unauthenticated attackers on the same network to: (1) read arbitrary files on the host filesystem, (2) establ...

9.8CVSS9.6AI score0.31809EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist•added 2018/08/13 5:00 p.m.•37 views

CVE-2018-13415

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...

9.8AI score0.31809EPSS
SaveExploits5References2
CNVD
CNVD•added 2018/08/07 12:00 a.m.•11 views

Plex Media Server's SSDP XML External Entity Injection Vulnerability

Plex Media Server is a multimedia entertainment player that supports multiple platforms. Plex Media Server's SSDP is vulnerable to an XML External Entity Injection vulnerability, which can be exploited by an unauthenticated attacker on the same LAN to access arbitrary files from the filesystem wi...

9.8CVSS9.8AI score0.31809EPSS
SaveExploits5References1
zdt
zdt•added 2018/08/06 12:00 a.m.•60 views

Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection Vulnerability

Exploit for jsp platform in category web applications Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection Reserved CVE: CVE-2018-13415 Vulnerability Overview The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External Entity...

0.2AI score0.31809EPSS
SaveExploits5
exploitpack
exploitpack•added 2018/08/03 12:00 a.m.•63 views

Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection

Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection Issue: Out-of-Band XXE in Plex Media Server's SSDP Processing Reserved CVE: CVE-2018-13415 Vulnerability Overview The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External...

7.5CVSS0.6AI score0.31809EPSS
SaveExploits5
Exploit DB
Exploit DB•added 2018/08/03 12:00 a.m.•63 views

Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection

Issue: Out-of-Band XXE in Plex Media Server's SSDP Processing Reserved CVE: CVE-2018-13415 Vulnerability Overview The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External Entity Processing XXE attack. Unauthenticated attackers on the same LAN can use...

9.8CVSS8.4AI score0.31809EPSS
SaveExploits5
Packet Storm
Packet Storm•added 2018/08/03 12:00 a.m.•61 views

Plex Media Server 1.13.2.5154 SSDP Processing XML Injection

Issue: Out-of-Band XXE in Plex Media Server's SSDP Processing Reserved CVE: CVE-2018-13415 Vulnerability Overview The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External Entity Processing XXE attack. Unauthenticated attackers on the same LAN can use...

0.9AI score0.31809EPSS
SaveExploits5
FreeBSD
FreeBSD•added 2018/08/01 12:00 a.m.•22 views

Plex Media Server -- Information Disclosure Vulnerability

Chris reports: The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External Entity Processing XXE attack. Unauthenticated attackers on the same LAN can use this vulnerability to: Access arbitrary files from the filesystem with the same permission as the...

9.8CVSS4.5AI score0.31809EPSS
SaveExploits5References1
exploitpack
exploitpack•added 2018/04/26 12:00 a.m.•56 views

SickRage v2018.03.09 - Clear-Text Credentials HTTP Response

SickRage v2018.03.09 - Clear-Text Credentials HTTP Response Exploit Title: SickRage v2018.03.09 - Clear-Text Credentials HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Vendor Homepage: https://sickrage.github.io Software Link: https://github.com/SickRage/SickRage Version:...

5CVSS9.7AI score0.75602EPSS
SaveExploits7
Packet Storm
Packet Storm•added 2018/04/26 12:00 a.m.•35 views

SickRage Credential Disclosure

Exploit Title: SickRage v2018.03.09 - Clear-Text Credentials HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Vendor Homepage: https://sickrage.github.io Software Link: https://github.com/SickRage/SickRage Version: v2018.03.09-1 CVE : CVE-2018-9160 Category: webapps 1. Background...

9.6AI score0.75602EPSS
SaveExploits7
zdt
zdt•added 2018/04/26 12:00 a.m.•49 views

SickRage < v2018.03.09 - Clear-Text Credentials HTTP Response Exploit

Exploit for linux platform in category web applications Exploit Title: SickRage v2018.03.09 - Clear-Text Credentials HTTP Response Exploit Author: Sven Fassbender Vendor Homepage: https://sickrage.github.io Software Link: https://github.com/SickRage/SickRage Version: v2018.03.09-1 CVE :...

9.6AI score0.75602EPSS
SaveExploits7
Rows per page
Query Builder