MiczFlor

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

MiczFlor records in CISA KEV

No MiczFlor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rpi-jukebox-rfid 9 records HIGH Phoniebox 8 records HIGH Newscoop 6 records LOW Campsite 1 record LOW

Records

8 records in Phoniebox · all components

TI-2025-39503 CVE-2025-63951 · GHSA-3cw3-x2fm-86wj

An insecure deserialization vulnerability exists in the rss-mp3.php script of the…

HIGH 72

An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c0568876fc41c48c38aa9a7014 (2025-10-07).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00531 Published 2025-12-18 No fix listed CWE-502

TI-2024-27610 CVE-2024-41369 · GHSA-w7cc-q8x4-3xx9

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php

MEDIUM 51

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2024-08-29 No fix listed CWE-94

TI-2024-27609 CVE-2024-41368 · GHSA-x37r-vj3m-8vc5

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE)…

MEDIUM 51

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2024-08-29 No fix listed CWE-94

TI-2024-27608 CVE-2024-41367 · GHSA-wv98-rm53-823r

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE)…

MEDIUM 51

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2024-08-29 No fix listed CWE-94

TI-2024-27607 CVE-2024-41366 · GHSA-8v2g-m5cr-4r79

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php

MEDIUM 51

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2024-08-29 No fix listed CWE-94

TI-2024-27606 CVE-2024-41364 · GHSA-5827-p7qc-6vf6

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php

MEDIUM 51

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2024-08-29 No fix listed CWE-94

TI-2024-27605 CVE-2024-41361 · GHSA-6hmg-mqf6-m38g

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE)…

MEDIUM 51

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2024-08-29 No fix listed CWE-94

TI-2024-00655 CVE-2024-0714 · GHSA-grxw-3fhr-64p2

MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection

MEDIUM 45

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01616 Published 2024-01-19 No fix listed CWE-78

Open these records in search →