dbbroadcast records
27 published records for vendor dbbroadcast.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 5
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-306 Missing Authentication for Critical Function5
- CWE-434 Unrestricted Upload of File with Dangerous Type4
- CWE-384 Session Fixation3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-73 External Control of File Name or Path2
The weakness classes this vendor ships most often: where to look.
CWEAll records
27 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-66261No exploit | Unauthenticated OS Command Injection (restore_settings.php)dbbroadcast · mozart next 100 firmware · CWE-78 | Critical9.9 | — | 2.3% | Nov 25, 2025 |
40Plan | CVE-2025-66253No exploit | Unauthenticated OS Command Injection (start_upgrade.php)dbbroadcast · mozart next 100 firmware · CWE-78 | Critical9.9 | — | 2.3% | Nov 25, 2025 |
39Monitor | CVE-2025-63228No exploit | The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /dbbroadcast · mozart next 100 firmware · CWE-434 | Critical9.8 | — | 0.8% | Nov 18, 2025 |
39Monitor | CVE-2025-66256No exploit | Unauthenticated Arbitrary File Upload (patch_contents.php)dbbroadcast · mozart next 100 firmware · CWE-434 | Critical9.9 | — | 0.4% | Nov 25, 2025 |
39Monitor | CVE-2025-66255No exploit | Unauthenticated Arbitrary File Upload (upgrade_contents.php)dbbroadcast · mozart next 3000 firmware · CWE-345 | Critical9.9 | — | 0.4% | Nov 25, 2025 |
37Monitor | CVE-2025-66262No exploit | Arbitrary File Overwrite via Tar Extraction Path Traversaldbbroadcast · mozart next 100 firmware · CWE-22 | Critical9.3 | — | 1.4% | Nov 25, 2025 |
37Monitor | CVE-2025-66259No exploit | Authenticated Root Remote Code Execution through improper filtering of HTTP post request parametersdbbroadcast · mozart next 100 firmware · CWE-20 | Critical9.3 | — | 0.7% | Nov 25, 2025 |
37Monitor | CVE-2023-53968No exploit | Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Erase Accountdbbroadcast · sft dab 600\/c firmware · CWE-306 | Critical9.3 | — | 0.6% | Dec 22, 2025 |
37Monitor | CVE-2023-53969No exploit | Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Password Changedbbroadcast · sft dab 600\/c firmware · CWE-306 | Critical9.3 | — | 0.5% | Dec 22, 2025 |
37Monitor | CVE-2023-53967No exploit | Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Admin Password Changedbbroadcast · sft dab 600\/c firmware · CWE-306 | Critical9.3 | — | 0.5% | Dec 22, 2025 |
36Monitor | CVE-2025-66250No exploit | Unauthenticated Arbitrary File Upload (status_contents.php)dbbroadcast · mozart next 100 firmware · CWE-434 | Critical9.2 | — | 0.4% | Nov 25, 2025 |
36Monitor | CVE-2025-66257No exploit | Unauthenticated Arbitrary File Deletion (patch_contents.php)dbbroadcast · mozart next 100 firmware · CWE-73 | Critical9.2 | — | 0.4% | Nov 25, 2025 |
35Monitor | CVE-2025-66263No exploit | Unauthenticated Arbitrary File Read via Null Byte Injectiondbbroadcast · mozart next 3000 firmware · CWE-158 | High8.9 | — | 0.4% | Nov 25, 2025 |
34Monitor | CVE-2023-53740No exploit | Screen SFT DAB 1.9.3 Authentication Bypass via Admin Password Changedbbroadcast · sft dab 015\/c firmware · CWE-862 | High8.6 | — | 0.9% | Dec 10, 2025 |
34Monitor | CVE-2023-53970No exploit | Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Reset Board Configdbbroadcast · sft dab 600\/c firmware · CWE-306 | High8.7 | — | 0.5% | Dec 22, 2025 |
34Monitor | CVE-2023-53776No exploit | Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weaknessdbbroadcast · sft dab 600\/c firmware · CWE-384 | High8.7 | — | 0.5% | Dec 10, 2025 |
33Monitor | CVE-2025-66252No exploit | Infinite Loop Denial of Service via Failed File Deletiondbbroadcast · mozart next 100 firmware · CWE-835 | High8.4 | — | 0.4% | Nov 25, 2025 |
31Monitor | CVE-2025-66254No exploit | Unauthenticated Arbitrary File Deletion (upgrade_contents.php)dbbroadcast · mozart next 100 firmware · CWE-73 | High7.8 | — | 0.4% | Nov 25, 2025 |
30Monitor | CVE-2025-66251No exploit | Unauthenticated Path Traversal with Arbitrary File Deletiondbbroadcast · mozart next 100 firmware · CWE-22 | High7.7 | — | 0.5% | Nov 25, 2025 |
28Monitor | CVE-2025-63227No exploit | The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patdbbroadcast · mozart next 100 firmware · CWE-434 | High7.2 | — | 0.6% | Nov 18, 2025 |
28Monitor | CVE-2023-53775No exploit | Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weaknessdbbroadcast · sft dab 600\/c firmware · CWE-384 | High7.1 | — | 0.4% | Dec 10, 2025 |
28Monitor | CVE-2025-66260No exploit | PostgreSQL SQL Injection (status_sql.php)dbbroadcast · mozart next 100 firmware · CWE-89 | High7.2 | — | 0.3% | Nov 25, 2025 |
28Monitor | CVE-2025-66258No exploit | Stored Cross-Site Scripting via XML Injectiondbbroadcast · mozart next 6000 firmware · CWE-79 | High7.1 | — | 0.2% | Nov 25, 2025 |
27Monitor | CVE-2023-7328No exploit | Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosuredbbroadcast · sft dab 600\/c firmware · CWE-306 | Medium6.9 | — | 0.3% | Nov 14, 2025 |
22Monitor | CVE-2023-33684No exploit | Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGdbbroadcast · sft dab 600\/c bios | Medium5.7 | — | 0.3% | Jun 6, 2023 |
- CVE-2025-6626140Plan
Unauthenticated OS Command Injection (restore_settings.php)
CriticalCVSS 9.9No exploitEPSS 2%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6625340Plan
Unauthenticated OS Command Injection (start_upgrade.php)
CriticalCVSS 9.9No exploitEPSS 2%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6322839Monitor
The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /
CriticalCVSS 9.8No exploitEPSS 1%dbbroadcast · mozart next 100 firmwareNov 18, 2025
- CVE-2025-6625639Monitor
Unauthenticated Arbitrary File Upload (patch_contents.php)
CriticalCVSS 9.9No exploitEPSS 0%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6625539Monitor
Unauthenticated Arbitrary File Upload (upgrade_contents.php)
CriticalCVSS 9.9No exploitEPSS 0%dbbroadcast · mozart next 3000 firmwareNov 25, 2025
- CVE-2025-6626237Monitor
Arbitrary File Overwrite via Tar Extraction Path Traversal
CriticalCVSS 9.3No exploitEPSS 1%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6625937Monitor
Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters
CriticalCVSS 9.3No exploitEPSS 1%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2023-5396837Monitor
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Erase Account
CriticalCVSS 9.3No exploitEPSS 1%dbbroadcast · sft dab 600\/c firmwareDec 22, 2025
- CVE-2023-5396937Monitor
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Password Change
CriticalCVSS 9.3No exploitEPSS 1%dbbroadcast · sft dab 600\/c firmwareDec 22, 2025
- CVE-2023-5396737Monitor
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Admin Password Change
CriticalCVSS 9.3No exploitEPSS 1%dbbroadcast · sft dab 600\/c firmwareDec 22, 2025
- CVE-2025-6625036Monitor
Unauthenticated Arbitrary File Upload (status_contents.php)
CriticalCVSS 9.2No exploitEPSS 0%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6625736Monitor
Unauthenticated Arbitrary File Deletion (patch_contents.php)
CriticalCVSS 9.2No exploitEPSS 0%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6626335Monitor
Unauthenticated Arbitrary File Read via Null Byte Injection
HighCVSS 8.9No exploitEPSS 0%dbbroadcast · mozart next 3000 firmwareNov 25, 2025
- CVE-2023-5374034Monitor
Screen SFT DAB 1.9.3 Authentication Bypass via Admin Password Change
HighCVSS 8.6No exploitEPSS 1%dbbroadcast · sft dab 015\/c firmwareDec 10, 2025
- CVE-2023-5397034Monitor
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Reset Board Config
HighCVSS 8.7No exploitEPSS 1%dbbroadcast · sft dab 600\/c firmwareDec 22, 2025
- CVE-2023-5377634Monitor
Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness
HighCVSS 8.7No exploitEPSS 0%dbbroadcast · sft dab 600\/c firmwareDec 10, 2025
- CVE-2025-6625233Monitor
Infinite Loop Denial of Service via Failed File Deletion
HighCVSS 8.4No exploitEPSS 0%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6625431Monitor
Unauthenticated Arbitrary File Deletion (upgrade_contents.php)
HighCVSS 7.8No exploitEPSS 0%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6625130Monitor
Unauthenticated Path Traversal with Arbitrary File Deletion
HighCVSS 7.7No exploitEPSS 0%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6322728Monitor
The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /pat
HighCVSS 7.2No exploitEPSS 1%dbbroadcast · mozart next 100 firmwareNov 18, 2025
- CVE-2023-5377528Monitor
Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness
HighCVSS 7.1No exploitEPSS 0%dbbroadcast · sft dab 600\/c firmwareDec 10, 2025
- CVE-2025-6626028Monitor
PostgreSQL SQL Injection (status_sql.php)
HighCVSS 7.2No exploitEPSS 0%dbbroadcast · mozart next 100 firmwareNov 25, 2025
- CVE-2025-6625828Monitor
Stored Cross-Site Scripting via XML Injection
HighCVSS 7.1No exploitEPSS 0%dbbroadcast · mozart next 6000 firmwareNov 25, 2025
- CVE-2023-732827Monitor
Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure
MediumCVSS 6.9No exploitEPSS 0%dbbroadcast · sft dab 600\/c firmwareNov 14, 2025
- CVE-2023-3368422Monitor
Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPG
MediumCVSS 5.7No exploitEPSS 0%dbbroadcast · sft dab 600\/c biosJun 6, 2023