Поиск уязвимостей
Количество 10
Количество 10
openSUSE-SU-2017:1485-1
Security update for libupnp
ALT-PU-2016-2493
ALT-PU-2016-2493: package `libupnp` update to version 1.6.21-alt1
CVE-2016-8863
Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request.
CVE-2016-8863
Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request.
CVE-2016-8863
Heap-based buffer overflow in the create_url_list function in gena/gen ...
CVE-2016-6255
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
CVE-2016-6255
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
CVE-2016-6255
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers ...
GHSA-cpx4-fhhq-52jh
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
GHSA-4cjm-5fqc-2f6p
Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2017:1485-1 Security update for libupnp | больше 9 лет назад | ||
| ALT-PU-2016-2493 ALT-PU-2016-2493: package `libupnp` update to version 1.6.21-alt1 | CVSS3: 9.8 | почти 10 лет назад | |
 | CVE-2016-8863 Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request. | CVSS3: 9.8 | 9% Низкий | больше 9 лет назад |
 | CVE-2016-8863 Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request. | CVSS3: 9.8 | 9% Низкий | больше 9 лет назад |
| CVE-2016-8863 Heap-based buffer overflow in the create_url_list function in gena/gen ... | CVSS3: 9.8 | 9% Низкий | больше 9 лет назад |
| CVE-2016-6255 Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler. | CVSS3: 7.5 | 27% Средний | больше 9 лет назад |
| CVE-2016-6255 Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler. | CVSS3: 7.5 | 27% Средний | больше 9 лет назад |
| CVE-2016-6255 Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers ... | CVSS3: 7.5 | 27% Средний | больше 9 лет назад |
| GHSA-cpx4-fhhq-52jh Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler. | CVSS3: 7.5 | 27% Средний | больше 4 лет назад |
| GHSA-4cjm-5fqc-2f6p Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request. | CVSS3: 9.8 | 9% Низкий | больше 4 лет назад |
Уязвимостей на страницу