Browse CVEs

HIGH 8.0 CVE-2018-20228 Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF. Subsonic No fix yet Fix from $1,9502018-12-19 MEDIUM 6.1 CVE-2018-14690 An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title and subt… Subsonic No fix yet Fix from $1,6002018-09-21 MEDIUM 6.1 CVE-2018-14691 An issue was discovered in Subsonic 6.1.1. The music tags feature is affected by three stored cross-site scripting vulnerabilities in the c0-param2, … Subsonic No fix yet Fix from $1,6002018-09-21 MEDIUM 6.1 CVE-2018-9282 An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parame… Subsonic No fix yet Fix from $1,6002018-09-21 MEDIUM 6.1 CVE-2018-14688 An issue was discovered in Subsonic 6.1.1. The radio settings are affected by three stored cross-site scripting vulnerabilities in the name[x], strea… Subsonic No fix yet Fix from $1,6002018-09-21 MEDIUM 6.1 CVE-2018-14689 An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the name[x], … Subsonic No fix yet Fix from $1,6002018-09-21 MEDIUM 5.9 CVE-2018-15898 The Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of the Subsonic server certificate, which might allow man… Music Streamer No fix yet Fix from $1,6002018-09-11 HIGH 8.8 CVE-2017-9414EPSS 15% Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentic… Subsonic No fix yet Fix from $1,9502018-02-05 MEDIUM 6.5 CVE-2018-6014 Subsonic v6.1.3 has an insecure allow-access-from domain="*" Flash cross-domain policy that allows an attacker to retrieve sensitive user information… Subsonic No fix yet Fix from $1,6002018-01-23 HIGH 8.8 CVE-2017-9413 Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authenticati… Subsonic No fix yet Fix from $1,9502017-07-25 HIGH 7.5 CVE-2017-9415 Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authent… Subsonic No fix yet Fix from $1,9502017-07-21 HIGH 7.4 CVE-2017-9355EPSS 27% XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request … Subsonic No fix yet Fix from $1,9502017-06-07