Skip to content
Noroxi

subsonic records

12 published records for vendor subsonic.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2017-9414
    40Plan

    Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the

    HighCVSS 8.8Proof of conceptEPSS 15%

    subsonic · subsonicFeb 5, 2018

  • CVE-2017-9355
    37Monitor

    XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side

    HighCVSS 7.4Proof of conceptEPSS 27%

    subsonic · subsonicJun 7, 2017

  • CVE-2017-9413
    36Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the aut

    HighCVSS 8.8Proof of conceptEPSS 2%

    subsonic · subsonicJul 25, 2017

  • CVE-2018-20228
    32Monitor

    Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.

    HighCVSS 8.0No exploitEPSS 0%

    subsonic · subsonicDec 19, 2018

  • CVE-2017-9415
    31Monitor

    Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack th

    HighCVSS 7.5Proof of conceptEPSS 2%

    subsonic · subsonicJul 21, 2017

  • CVE-2018-6014
    26Monitor

    Subsonic v6.1.3 has an insecure allow-access-from domain="*" Flash cross-domain policy that allows an attacker to retrieve sensitive user in

    MediumCVSS 6.5No exploitEPSS 1%

    subsonic · subsonicJan 22, 2018

  • CVE-2018-9282
    24Monitor

    An XSS issue was discovered in Subsonic Media Server 6.1.1.

    MediumCVSS 6.1No exploitEPSS 1%

    subsonic · subsonicSep 21, 2018

  • CVE-2018-14688
    24Monitor

    An issue was discovered in Subsonic 6.1.1.

    MediumCVSS 6.1No exploitEPSS 1%

    subsonic · subsonicSep 21, 2018

  • CVE-2018-14689
    24Monitor

    An issue was discovered in Subsonic 6.1.1.

    MediumCVSS 6.1No exploitEPSS 1%

    subsonic · subsonicSep 21, 2018

  • CVE-2018-14690
    24Monitor

    An issue was discovered in Subsonic 6.1.1.

    MediumCVSS 6.1No exploitEPSS 1%

    subsonic · subsonicSep 21, 2018

  • CVE-2018-14691
    24Monitor

    An issue was discovered in Subsonic 6.1.1.

    MediumCVSS 6.1No exploitEPSS 1%

    subsonic · subsonicSep 21, 2018

  • CVE-2018-15898
    23Monitor

    The Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of the Subsonic server certificate, which might

    MediumCVSS 5.9No exploitEPSS 1%

    subsonic · music streamerSep 11, 2018