Approved changes feed: RSS · Atom

cpe:2.3:a:request_serious_play_llc:request_serious_play_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRequest Serious Play Llc (b3477878-c8c4-539e-be18-5623e8d88b0a)
ProductRequest Serious Play Pro (13139935-0075-5e2e-8647-0599088cfd54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4465 vulnerable 2026-06-08 05:39:07.291415 ReQuest Serious Play F3 Media Server <= 7.0.3 Remote DoS
ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 contain a remote denial-of-service vulnerability. The device can be shut down or rebooted by an unauthenticated attacker through a single crafted HTTP GET request, allowing remote interruption of service availability.
Published: 2025-11-14T22:51:28.004Z
Updated: 2026-04-07T14:05:26.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36877 vulnerable 2026-06-08 05:25:49.755585 ReQuest Serious Play F3 Media Server <= 7.0.3 code execution
ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user. Attackers can upload PHP executable files via the Quick File Uploader page, resulting in remote code execution on the server.
Published: 2025-12-05T17:16:50.376Z
Updated: 2026-04-07T14:04:57.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36876 vulnerable 2026-06-08 05:25:49.753651 ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020
ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running on the device. Attackers can access sensitive information by visiting the message_log page.
Published: 2025-12-05T17:13:38.501Z
Updated: 2026-07-28T01:47:05.121Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.