Dream-multimedia-tv CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2015-4714

Cross-site scripting (XSS) vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body.

CVSS 2.0 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Dream-multimedia-tv

Products

Dreambox Dm500-s Dreambox Dm500-s Firmware

CVE-2011-4716

Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed

Vendors

Dream-multimedia-tv

Products

Dreambox Dm800 Hd Pvr Dreambox Dm800 Hd Pvr Firmware Dreambox Dm800 Hd Se and 1 more

CVE-2012-1024

Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed

Vendors

Dream-multimedia-tv

Products

Enigma2 Webinterface

CVE-2012-1025

Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.

CVSS 2.0 · 5.0 Medium EPSS 5.7% KEV · Not listed

Vendors

Dream-multimedia-tv

Products

Enigma2 Webinterface

Page 1 of 1.