Vulnerabilities

TI-2025-09507 CVE-2025-10370 · GHSA-rxmq-8fwh-qv2c

MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting

MEDIUM 56

A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00701 Published 2025-09-13 No fix listed CWE-79

TI-2025-09506 CVE-2025-10369 · GHSA-9h26-79x8-9c53

MEDIUM 56

A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00306 Published 2025-09-13 No fix listed CWE-79

TI-2025-09505 CVE-2025-10368 · GHSA-ffx8-677x-2hgq

MEDIUM 56

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00303 Published 2025-09-13 No fix listed CWE-79

TI-2025-09504 CVE-2025-10367 · GHSA-wf4q-g5g8-q8w9

MEDIUM 56

A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00303 Published 2025-09-13 No fix listed CWE-79

TI-2025-09503 CVE-2025-10366 · GHSA-r76w-8fvw-mh93

MEDIUM 56

A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00293 Published 2025-09-13 No fix listed CWE-79

TI-2025-09477 CVE-2025-10328 · GHSA-vhqv-99hp-gx94

MEDIUM 57

A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.07795 Published 2025-09-12 No fix listed CWE-77

TI-2025-09476 CVE-2025-10327 · GHSA-jgc8-85r3-j7pm

HIGH 65

A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.10158 Published 2025-09-12 No fix listed CWE-77

TI-2025-09475 CVE-2025-10326 · GHSA-hp8r-5cjw-7jv3

MEDIUM 57

A security flaw has been discovered in MiczFlor RPi-Jukebox-RFID up to 2.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05855 Published 2025-09-12 No fix listed CWE-77

TI-2022-16999 CVE-2022-36749 · GHSA-9538-25rq-j9g9

MEDIUM 47

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02774 Published 2022-08-30 No fix listed CWE-78