Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority HIGH 81

MiniDVBLinux 5.4 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands as root through the 'command' GET parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0137 Published 2025-12-30 No fix listed CWE-78
Priority HIGH 77

MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0053 Published 2025-12-09 No fix listed CWE-306
Priority HIGH 77

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0096 Published 2025-12-09 No fix listed CWE-22
Priority HIGH 77

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00542 Published 2025-12-09 No fix listed CWE-260
TI-2025-18710 CVE-2025-25038 · GHSA-r3xp-pwxv-p43m

MiniDVBLinux Root Command Injection

Priority HIGH 81

An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0555 Published 2025-06-20 No fix listed CWE-78