kodi records
6 published records for vendor kodi.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 16.7%
- Pre-auth RCE
- 0
- With a fix record
- 83.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-369 Divide By Zero1
- CWE-787 Out-of-bounds Write1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
53Plan | CVE-2017-5982Weaponized | Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (enkodi · kodi · CWE-22 | High7.5 | — | 78.0% | Feb 28, 2017 |
40Plan | CVE-2018-8831Proof of concept | A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the cokodi · kodi · CWE-79 | Medium6.1 | — | 52.0% | Apr 18, 2018 |
23Monitor | CVE-2017-8314No exploit | Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtikodi · kodi · CWE-22 | Medium5.5 | — | 2.5% | May 23, 2017 |
23Monitor | CVE-2021-42917No exploit | Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passedkodi · kodi · CWE-120 | Medium5.5 | — | 1.9% | Nov 1, 2021 |
22Monitor | CVE-2023-30207No exploit | A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crkodi · kodi · CWE-369 | Medium5.5 | — | 0.3% | Jul 5, 2023 |
18Monitor | CVE-2023-23082No exploit | A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an impropkodi · kodi · CWE-787 | Medium4.6 | — | 0.7% | Feb 3, 2023 |
- CVE-2017-598253Plan
Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (en
HighCVSS 7.5WeaponizedEPSS 78%kodi · kodiFeb 28, 2017
- CVE-2018-883140Plan
A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the co
MediumCVSS 6.1Proof of conceptEPSS 52%kodi · kodiApr 18, 2018
- CVE-2017-831423Monitor
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subti
MediumCVSS 5.5No exploitEPSS 2%kodi · kodiMay 23, 2017
- CVE-2021-4291723Monitor
Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed
MediumCVSS 5.5No exploitEPSS 2%kodi · kodiNov 1, 2021
- CVE-2023-3020722Monitor
A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of cr
MediumCVSS 5.5No exploitEPSS 0%kodi · kodiJul 5, 2023
- CVE-2023-2308218Monitor
A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improp
MediumCVSS 4.6No exploitEPSS 1%kodi · kodiFeb 3, 2023