Read the docs

MiniDVBLinux

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

MiniDVBLinux records in CISA KEV

No MiniDVBLinux vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records

TI-2025-18710 CVE-2025-25038 · GHSA-r3xp-pwxv-p43m

MiniDVBLinux Root Command Injection

Priority HIGH 81

An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0555 Published 2025-06-20 No fix listed CWE-78
Priority HIGH 81

MiniDVBLinux 5.4 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands as root through the 'command' GET parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0137 Published 2025-12-30 No fix listed CWE-78
Priority HIGH 77

MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0053 Published 2025-12-09 No fix listed CWE-306
Priority HIGH 77

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0096 Published 2025-12-09 No fix listed CWE-22
Priority HIGH 77

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00542 Published 2025-12-09 No fix listed CWE-260
Open these records in search →