Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Owntone Server
HIGH 7.5
CVE-2025-63647
A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 334beb allows attackers to cause a Denial of Servic…
Fix: 28.3+
Fix from $1,950
2026-01-20
Owntone Server
HIGH 7.5
CVE-2025-63648
A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of owntone-server commit b7e385f allows attackers to caus…
Fix: after 29.0
Fix from $1,950
2026-01-20
Owntone Server
HIGH 7.5
CVE-2025-57155
NULL pointer dereference in the daap_reply_groups function in src/httpd_daap.c in owntone-server through commit 5e6f19a (newer commit after version 2…
Fix: after 28.2
Fix from $1,950
2026-01-20
Owntone Server
HIGH 7.5
CVE-2025-57156
NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through commit 6d604a1 (newer commit af…
Fix: after 28.12
Fix from $1,950
2026-01-20
Owntone Server
CRITICAL 9.8
CVE-2021-38383
OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c.
Fix: after 28.1
Fix from $2,300
2021-08-10