Lucene search
K

26 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в wpa, pupnp-1.8

The Open Connectivity Foundation’s UPnP specification prior to April 17, 2020, does not prohibit the acceptance of a subscription request with a delivery URL located in a different network segment than the fully qualified event-subscription URL. This is known as the “CallStranger” issue...

7.8CVSS6.9AI score0.03982EPSS
Exploits3References2
NVD
NVD
added 2026/05/08 11:16 p.m.5 views

CVE-2026-41682

pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi cast in parseuri. This issue has been patched in version 1.18.5...

6.9CVSS0.00016EPSS
Exploits0References3
CVE
CVE
added 2026/05/08 10:47 p.m.6 views

CVE-2026-41682

CVE-2026-41682 affects pupnp (UPnP SDK); prior to 1.18.5 it is vulnerable to SRRF/port-confusion from port truncation caused by atoi() in parse_uri(). Patch available in pupnp 1.18.5. CVSS 4.0 base score 6.9 (MEDIUM).

6.9CVSS5.7AI score0.00016EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/08 10:47 p.m.3 views

CVE-2026-41682 pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion

pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi cast in parseuri. This issue has been patched in version 1.18.5...

6.9CVSS5.7AI score0.00016EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/08 10:47 p.m.8 views

EUVD-2026-28846

pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi cast in parseuri. This issue has been patched in version 1.18.5...

6.9CVSS5.7AI score0.00016EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/08 10:47 p.m.31 views

CVE-2026-41682 pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion

pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi cast in parseuri. This issue has been patched in version 1.18.5...

6.9CVSS0.00016EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 10:47 p.m.3 views

CVE-2026-41682

pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi cast in parseuri. This issue has been patched in version 1.18.5...

6.9CVSS5.7AI score0.00016EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.4 views

pupnp 安全漏洞

Pupnp is an open-source application developed by the Portable SDK for UPnP Devices. It’s a portable SDK for UPnP devices. Versions of Pupnp prior to 1.18.5 contained security vulnerabilities. These vulnerabilities were caused by the atoi function used in parseuri, which led to port truncation and...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-41682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-14991

Malware in sbrugna...

7.5CVSS7.6AI score0.00374EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 7:33 p.m.5 views

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.5CVSS7AI score0.00374EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2021/04/22 12:0 a.m.19 views

lipupnp < 1.14.6 DNS Rebind Vulnerability (GHSA-6hqq-w3jq-9fhg)

libupnp is prone to a DNS rebind vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.5AI score0.00137EPSS
Exploits0References1
NVD
NVD
added 2021/03/12 3:15 p.m.10 views

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.5CVSS0.00374EPSS
Exploits1References2
OSV
OSV
added 2021/03/12 3:15 p.m.10 views

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.5CVSS7AI score
Exploits0References2
OSV
OSV
added 2021/03/12 3:15 p.m.1 views

DEBIAN-CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.5CVSS7.8AI score0.00374EPSS
Exploits1References1
OSV
OSV
added 2021/03/12 3:15 p.m.1 views

UBUNTU-CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.5CVSS7.2AI score0.00374EPSS
Exploits1References3
Prion
Prion
added 2021/03/12 3:15 p.m.10 views

Stack overflow

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

5CVSS7.5AI score0.00374EPSS
Exploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/03/12 3:15 p.m.18 views

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.5CVSS7.2AI score0.00374EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/03/12 2:32 p.m.14 views

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.7AI score0.00374EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2021/03/12 2:32 p.m.16 views

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node recursively, which will consume stack space and lead to a crash...

7.5CVSS7.6AI score0.00374EPSS
Exploits1
Rows per page
Query Builder