Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-28926 2 Debian, Readymedia Project 2 Debian Linux, Readymedia 2024-11-21 9.8 Critical
ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.
CVE-2013-2739 2 Debian, Readymedia Project 2 Debian Linux, Readymedia 2024-11-21 9.8 Critical
MiniDLNA has heap-based buffer overflow
CVE-2013-2738 1 Readymedia Project 1 Readymedia 2024-11-21 9.8 Critical
minidlna has SQL Injection that may allow retrieval of arbitrary files