Readymedia Project Readymedia — known CVE vulnerabilities

Every CVE whose affected-product data names Readymedia Project Readymedia, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2013-2738 — CVSS 9.8 (critical): minidlna has SQL Injection that may allow retrieval of arbitrary files
• CVE-2013-2739 — CVSS 9.8 (critical): MiniDLNA has heap-based buffer overflow
• CVE-2020-28926 — CVSS 9.8 (critical): ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service…
• CVE-2023-33476 — CVSS 9.8 (critical): ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect…
• CVE-2023-47430 — CVSS 7.5 (high): Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the…
• CVE-2022-26505 — CVSS 7.4 (high): A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.