Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:win32:*:*:*:*:*

part: a version: 1.9.4 update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductShoutcast Server (ad3d973c-84ea-5dc8-967a-4a5a56b7c203)
Editionwin32
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3534 vulnerable 2026-06-08 04:49:09.593423 Details available
Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".
Published: 2006-07-12T21:00:00.000Z
Updated: 2024-08-07T18:30:34.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3007 vulnerable 2026-06-08 04:49:08.037466 Details available
Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.
Published: 2006-06-13T10:00:00.000Z
Updated: 2024-08-07T18:16:05.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1373 vulnerable 2026-06-08 04:47:53.884389 Details available
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:12.506Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.