Skip to main content

Sabnzbd

3 CVEs product

Monthly

CVE-2023-34237 CRITICAL PATCH Act Now

SABnzbd is an open source automated Usenet download tool. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Code Injection Sabnzbd
NVD GitHub
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-29488 MEDIUM PATCH This Month

SABnzbd is an open source binary newsreader. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Sabnzbd
NVD GitHub
CVSS 3.1
5.3
EPSS
0.9%
CVE-2020-13124 HIGH PATCH This Week

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Python Command Injection Sabnzbd
NVD GitHub
CVSS 3.1
8.8
EPSS
4.6%
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

SABnzbd is an open source automated Usenet download tool. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Code Injection Sabnzbd
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

SABnzbd is an open source binary newsreader. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Sabnzbd
NVD GitHub
EPSS 5% CVSS 8.8
HIGH PATCH This Week

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Python Command Injection Sabnzbd
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy