Lucene search
+L

110 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-6583

Malware in sbrugna...

6.1CVSS6.3AI score0.00675EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.16 views

EUVD-2025-16433

Malicious code in bioql PyPI...

8.7CVSS6.3AI score0.00425EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/01 12:0 a.m.5 views

FreeBSD : navidrome -- transcoding permission bypass vulnerability (95480188-6ebc-11f0-8a78-bf201f293bce)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 95480188-6ebc-11f0-8a78-bf201f293bce advisory. Deluan Quinto reports: A permission verification flaw in Navidrome allows any authenticated regular use...

8.7CVSS5.6AI score0.00425EPSS
SaveExploits1References3
Akamai Blog
Akamai Blog
added 2025/07/09 10:20 a.m.7 views

Scalable Video Transcoding on Linode with Kubernetes and Capella

...

5.3AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/07/04 2:37 p.m.4 views

SUSE CVE-2025-48948

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating,...

6.5CVSS6.6AI score0.00425EPSS
SaveExploits1References2
Veracode
Veracode
added 2025/06/03 2:33 a.m.12 views

Permission Verification Flaw

github.com/navidrome/navidrome is vulnerable to a permission verification flaw. The vulnerability is due to insufficient permission verification, allowing regular authenticated users to perform administrator-only transcoding configuration operations...

8.7CVSS6.4AI score0.00425EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/01 7:33 p.m.11 views

CVE-2025-48948

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating,...

8.7CVSS6.6AI score0.00425EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/30 8:15 p.m.20 views

CVE-2025-48948

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating,...

8.7CVSS0.00425EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/05/30 7:25 p.m.8 views

CVE-2025-48948 Navidrome Transcoding Permission Bypass Vulnerability Report

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating,...

8.7CVSS6.2AI score0.00425EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/05/30 7:25 p.m.42 views

CVE-2025-48948 Navidrome Transcoding Permission Bypass Vulnerability Report

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating,...

8.7CVSS0.00425EPSS
SaveExploits1References3
OSV
OSV
added 2025/05/30 7:25 p.m.10 views

CVE-2025-48948 Navidrome Transcoding Permission Bypass Vulnerability Report

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating,...

8.7CVSS6.2AI score
SaveExploits0References5
CVE
CVE
added 2025/05/30 7:25 p.m.64 views

CVE-2025-48948

Navidrome (open source web-based music server) has a permission verification flaw in versions prior to 0.56.0 that lets any authenticated regular user bypass authorization checks and perform administrator-only transcoding configuration operations (create, modify, delete settings). Root cause: ins...

8.7CVSS6.7AI score0.00425EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
added 2025/05/30 7:25 p.m.11 views

CVE-2025-48948

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating,...

8.7CVSS7AI score0.00425EPSS
SaveExploits1
OSV
OSV
added 2025/05/29 10:36 p.m.9 views

GHSA-F238-RGGP-82M3 Navidrome Transcoding Permission Bypass Vulnerability Report

Summary A permission verification flaw in Navidrome allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating, modifying, and deleting transcoding settings. Details Navidrome supports transcoding...

8.7CVSS7.5AI score0.00425EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2025/05/29 10:36 p.m.34 views

Navidrome Transcoding Permission Bypass Vulnerability Report

Summary A permission verification flaw in Navidrome allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating, modifying, and deleting transcoding settings. Details Navidrome supports transcoding...

8.7CVSS7.5AI score0.00425EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/29 12:0 a.m.6 views

PT-2025-23229 · Navidrome · Navidrome

Name of the Vulnerable Software and Affected Versions: Navidrome versions prior to 0.56.0 Description: A permission verification flaw in Navidrome allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including...

8.7CVSS6AI score0.00425EPSS
SaveExploits1References10
FreeBSD
FreeBSD
added 2025/05/29 12:0 a.m.8 views

navidrome -- transcoding permission bypass vulnerability

Deluan Quintão reports: A permission verification flaw in Navidrome allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating, modifying, and deleting transcoding settings...

8.7CVSS7.2AI score0.00425EPSS
SaveExploits1References1
Akamai Blog
Akamai Blog
added 2025/03/07 10:20 a.m.6 views

Scale Transcoding and AI Workloads with GPU Kubernetes Clusters

...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:0 a.m.21 views

Qnap QTS Remote Code Execution (CVE-2017-13067)

QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port...

9.8CVSS9.2AI score0.16678EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/15 10:15 p.m.9 views

CVE-2024-34731

In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS5.9AI score0.00108EPSS
SaveExploits0References6
Rows per page
Query Builder