Vulnerabilities

TI-2023-25646 CVE-2023-47430 · GHSA-vjq8-qf9g-mxxr

Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to…

LOW 34

Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer() function at tivo_commands.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00645 Published 2024-03-25 No fix listed CWE-120

TI-2023-16542 CVE-2023-33476 · GHSA-xch8-fp3g-32mq

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow.

HIGH 82

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02061 Published 2023-06-02 No fix listed CWE-787

TI-2022-09847 CVE-2022-26505 · GHSA-xw94-4rmp-7qw5

A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web…

LOW 36

A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.01597 Published 2022-03-06 No fix listed CWE-290

TI-2020-17458 CVE-2020-28926 · GHSA-gvj3-gg8w-3vrm

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution.

MEDIUM 57

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13111 Published 2020-11-30 No fix listed CWE-120

TI-2013-02399 CVE-2013-2739 · GHSA-cw8g-549r-x76f

MiniDLNA has heap-based buffer overflow

MEDIUM 50

MiniDLNA has heap-based buffer overflow

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04695 Published 2019-11-01 No fix listed CWE-119

TI-2013-02398 CVE-2013-2738 · GHSA-52x3-4q77-2jhw

minidlna has SQL Injection that may allow retrieval of arbitrary files

MEDIUM 46

minidlna has SQL Injection that may allow retrieval of arbitrary files

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02177 Published 2019-11-01 No fix listed CWE-89

Vulnerabilities

Filters

Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to…

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow.

A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web…

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution.

MiniDLNA has heap-based buffer overflow

minidlna has SQL Injection that may allow retrieval of arbitrary files