Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ReQuest Serious Play LLC Clear all filters
TI-2020-19013 CVE-2020-36878 · GHSA-hw9g-6q6h-x6rm

ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure

Priority HIGH 77

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log file…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00371 Published 2025-12-05 No fix listed CWE-73
TI-2020-19012 CVE-2020-36877 · GHSA-xf33-5vhp-qxgp

ReQuest Serious Play F3 Media Server <= 7.0.3 code execution

Priority HIGH 81

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0077 Published 2025-12-05 No fix listed CWE-78
TI-2020-19011 CVE-2020-36876 · GHSA-8wf6-q8c8-vqj7

ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020

Priority HIGH 77

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00401 Published 2025-12-05 No fix listed CWE-532
TI-2021-03321 CVE-2021-4465 · GHSA-m5xx-7q4g-9wfx

ReQuest Serious Play F3 Media Server <= 7.0.3 Remote DoS

Priority HIGH 77

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 contain a remote denial-of-service vulnerability.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2025-11-14 No fix listed CWE-400