Read the docs

Firefly

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Firefly records in CISA KEV

No Firefly vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Firefly 2 records MEDIUM Media Server 2 records MEDIUM

Records

2 records in Media Server · all components

TI-2007-05590 CVE-2007-5824 · GHSA-33cc-8pcc-ph75

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers…

Priority MEDIUM 40

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authoriza…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.05592 Published 2007-11-05 No fix listed CWE-20
TI-2007-05591 CVE-2007-5825 · GHSA-x57w-969p-qrv9

Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in…

Priority LOW 39

Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with form…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03723 Published 2007-11-05 No fix listed CWE-134
Open these records in search →