Advisories · Technology
MusicPlayerDaemon MPD.
Every CVE that names MusicPlayerDaemon MPD among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx
- MusicPlayerDaemon MPD
- Other injection
- CVSS 6.9 Medium
Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin
- MusicPlayerDaemon MPD
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling
- MusicPlayerDaemon MPD
- Path traversal
- CVSS 8.8 High
Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be
- MusicPlayerDaemon MPD
- CWE-193