Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2025-63647 A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 334beb allows attackers to cause a Denial of Servic… Owntone Server 28.3+ Fix from $1,9502026-01-20 HIGH 7.5 CVE-2025-63648 A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of owntone-server commit b7e385f allows attackers to caus… Owntone Server after 29.0 Fix from $1,9502026-01-20 HIGH 7.5 CVE-2025-57155 NULL pointer dereference in the daap_reply_groups function in src/httpd_daap.c in owntone-server through commit 5e6f19a (newer commit after version 2… Owntone Server after 28.2 Fix from $1,9502026-01-20 HIGH 7.5 CVE-2025-57156 NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through commit 6d604a1 (newer commit af… Owntone Server after 28.12 Fix from $1,9502026-01-20 CRITICAL 9.8 CVE-2021-38383 OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c. Owntone Server after 28.1 Fix from $2,3002021-08-10