libupnp project records
5 published records for vendor libupnp project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 20%
- Pre-auth RCE
- 3
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-284 Improper Access Control1
- CWE-476 NULL Pointer Dereference1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
65This week | CVE-2012-5958Weaponized | Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devicelibupnp project · libupnp · CWE-119 | Critical10.0 | — | 83.2% | Jan 31, 2013 |
51Plan | CVE-2012-5961Proof of concept | Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devicelibupnp project · libupnp · CWE-119 | Critical10.0 | — | 36.9% | Jan 31, 2013 |
42Plan | CVE-2016-8863Proof of concept | Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remlibupnp project · libupnp · CWE-119 | Critical9.8 | — | 8.5% | Mar 7, 2017 |
38Monitor | CVE-2016-6255Proof of concept | Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without debian · debian linux · CWE-284 | High7.5 | — | 27.0% | Mar 7, 2017 |
31Monitor | CVE-2020-13848No exploit | Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message dlibupnp project · libupnp · CWE-476 | High7.5 | — | 3.5% | Jun 4, 2020 |
- CVE-2012-595865This week
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device
CriticalCVSS 10.0WeaponizedEPSS 83%libupnp project · libupnpJan 31, 2013
- CVE-2012-596151Plan
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device
CriticalCVSS 10.0Proof of conceptEPSS 36%libupnp project · libupnpJan 31, 2013
- CVE-2016-886342Plan
Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows rem
CriticalCVSS 9.8Proof of conceptEPSS 8%libupnp project · libupnpMar 7, 2017
- CVE-2016-625538Monitor
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without
HighCVSS 7.5Proof of conceptEPSS 27%debian · debian linuxMar 7, 2017
- CVE-2020-1384831Monitor
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message d
HighCVSS 7.5No exploitEPSS 3%libupnp project · libupnpJun 4, 2020