Lucene search
K

81 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/15 6:34 p.m.0 views

CVE-2017-20219

Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads. Attackers can craft URLs with malicious input that is read from document.location and passed to...

5.9AI score0.00046EPSS
Exploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/22 5:35 a.m.3 views

CVE-2025-14993

A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now...

9CVSS7.2AI score0.00252EPSS
Exploits1References1
NVD
NVD
added 2025/12/21 5:16 a.m.2 views

CVE-2025-14993

A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now...

9CVSS0.00252EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/21 4:32 a.m.12 views

CVE-2025-14993 Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow

A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now...

9CVSS0.00252EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/21 4:32 a.m.2 views

CVE-2025-14993 Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow

A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now...

9CVSS9.1AI score0.00252EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/21 12:0 a.m.1 views

Tenda AC18 安全漏洞

Tenda AC18 is a router from Tenda China. A security vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from the improper handling of the parameter scanList in the sprintf function of file /goform/SetDlnaCfg in the component HTTP Request Handler, which could result in a stack...

9CVSS9.1AI score0.00252EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.2 views

PT-2025-52552

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 Description A flaw exists in the Tenda AC18 router that could allow for remote attacks. The issue is related to the sprintf function within the HTTP Request Handler component, specifically in the file...

9CVSS7.2AI score0.00252EPSS
Exploits1References19
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-42359

Malicious code in bioql PyPI...

4CVSS4.7AI score0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-29009

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00995EPSS
Exploits0References1
Fedora
Fedora
added 2025/07/18 1:10 a.m.7 views

[SECURITY] Fedora 41 Update: minidlna-1.3.3-10.fc41

MiniDLNA aka ReadyDLNA is server software with the aim of being fully compliant with DLNA/UPnP-AV clients. The minidlna daemon serves media files music, pictures, and video to clients on your local network. Example clients include applications such as Totem and XBMC, and devices such as portable...

7.5CVSS7.2AI score0.00028EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 11:25 p.m.1 views

CVE-2022-39914

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

4CVSS4.4AI score0.00016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:18 p.m.3 views

CVE-2022-38325

Tenda AC15 WiFi Router V15.03.05.19multi and AC18 WiFi Router V15.03.05.19multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile...

9.8CVSS7.5AI score0.00459EPSS
Exploits1References1
OSV
OSV
added 2024/11/01 4:15 p.m.1 views

CVE-2024-10661

A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit...

8.8CVSS6.4AI score0.00828EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/08/09 12:0 a.m.4 views

PT-2024-7539 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.19 Description: A critical vulnerability has been found in the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to a stack-based buffer overflow. This issue can be...

9CVSS9AI score0.00828EPSS
Exploits1References13
CNVD
CNVD
added 2024/03/26 12:0 a.m.1 views

Tenda AC15 formExpandDlnaFile method stack buffer overflow vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a stack buffer overflow...

9.8CVSS8.4AI score0.00769EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/03/18 12:0 a.m.1 views

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack overflow vulnerability in the filePath parameter of the formExpandDlnaFile function...

4.3CVSS7.3AI score0.00082EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2023/04/06 12:0 a.m.224 views

Universal Media Server 13.2.1 Cross Site Scripting

Exploit Title: Universal Media Server 13.2.1 Cross Site Scripting Google Dork: NA Date: 01/04/2023 Exploit Author: Yehia Elghaly - Mrvar0x Vendor Homepage: https://www.universalmediaserver.com/ Software Link: https://www.universalmediaserver.com/download/ Version: 13.2.1 Tested on: Windows 7 / 10...

6.8AI score
Exploits0
NVD
NVD
added 2022/12/08 4:15 p.m.6 views

CVE-2022-39914

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

4CVSS0.00016EPSS
Exploits0References1
Prion
Prion
added 2022/12/08 4:15 p.m.13 views

Information disclosure

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

1.7CVSS4AI score0.00016EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/08 12:0 a.m.17 views

CVE-2022-39914

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

4CVSS4.4AI score0.00016EPSS
Exploits0References1
Rows per page
Query Builder