Lucene search
+L

162 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-6584

Malware in sbrugna...

6.1CVSS6.3AI score0.00675EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-12794

Malware in sbrugna...

8CVSS7.9AI score0.0042EPSS
SaveExploits3References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-6582

Malware in sbrugna...

6.1CVSS6.3AI score0.00675EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-18349

Malware in sbrugna...

8.8CVSS8.7AI score0.15395EPSS
SaveExploits5References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-7754

Malware in sbrugna...

5.9CVSS5.9AI score0.00907EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-18350

Malware in sbrugna...

7.5CVSS7.6AI score0.02478EPSS
SaveExploits5References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-17777

Malware in sbrugna...

6.5CVSS6.6AI score0.01244EPSS
SaveExploits3References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-18348

Malware in sbrugna...

8.8CVSS8.8AI score0.01776EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2021-8696

Malicious code in bioql PyPI...

9.1CVSS7.9AI score0.01438EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-3317

Malicious code in bioql PyPI...

8.6CVSS8.5AI score0.0069EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-21399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic AP...

9.1CVSS7.3AI score0.01438EPSS
SaveExploits1References2
VulnCheck KEV
VulnCheck KEV
added 2025/06/24 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-27112

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...

6.9CVSS5.9AI score0.00947EPSS
SaveIn wildExploits1References46
RedhatCVE
RedhatCVE
added 2025/05/23 2:18 a.m.11 views

CVE-2023-51442

Navidrome is an open source web-based music collection server and streamer. A security vulnerability has been identified in navidrome's subsonic endpoint, allowing for authentication bypass. This exploit enables unauthorized access to any known account by utilizing a JSON Web Token JWT signed wit...

8.6CVSS7.3AI score0.0069EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:10 p.m.7 views

CVE-2021-21399

Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and...

9.1CVSS7AI score0.01438EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/04/22 12:0 a.m.10 views

FreeBSD : Navidrome -- Authentication bypass in Subsonic API (5ca2cafa-1f24-11f0-ab07-f8f21e52f724)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5ca2cafa-1f24-11f0-ab07-f8f21e52f724 advisory. Deluan reports: In certain Subsonic API endpoints, authentication can be bypassed by using a non-existe...

6.9CVSS5.5AI score0.00947EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2025/03/14 2:57 a.m.5 views

SUSE CVE-2025-27112

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...

6.5CVSS7.2AI score0.00947EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/03 7:22 p.m.15 views

GO-2025-3484 Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome

Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome...

6.9CVSS6.7AI score0.00947EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/02/26 7:23 p.m.19 views

CVE-2025-27112

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...

6.9CVSS7.1AI score0.00947EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2025/02/25 5:49 p.m.37 views

Navidrome allows an authentication bypass in Subsonic API with non-existent username

Summary In certain Subsonic API endpoints, authentication can be bypassed by using a non-existent username combined with an empty salted password hash. This allows read-only access to the server’s resources, though attempts at write operations fail with a “permission denied” error. Details A flaw...

6.9CVSS7.4AI score0.00947EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/02/25 5:49 p.m.16 views

GHSA-C3P4-VM8F-386P Navidrome allows an authentication bypass in Subsonic API with non-existent username

Summary In certain Subsonic API endpoints, authentication can be bypassed by using a non-existent username combined with an empty salted password hash. This allows read-only access to the server’s resources, though attempts at write operations fail with a “permission denied” error. Details A flaw...

6.9CVSS7AI score0.00947EPSS
SaveExploits1References5
Rows per page
Query Builder