Pocketmine Mp
Approved changes feed: RSS · Atom
cpe:2.3:a:pmmp:pocketmine-mp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pmmp (c16e8808-d0d3-5002-913d-d4ccfecfe552) |
|---|---|
| Product | Pocketmine Mp (53e9c41c-344a-55ba-bf11-377f5d308d50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-37277 |
vulnerable | 2026-09-16 04:48:40.725499 |
PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction
MEDIUM (6.5)
PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem() method. Malicious clients can send specially crafted InventoryTransactionPackets with multiple conflicting pathways to cause exponential processing complexity, freezing the server.
Published: 2026-09-06T12:00:22.145Z
Updated: 2026-10-08T15:20:49.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58380 |
vulnerable | 2026-09-16 04:46:27.310999 |
PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket
MEDIUM (6.5)
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.
Published: 2026-09-09T13:31:54.824Z
Updated: 2026-10-08T15:21:11.358Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58381 |
vulnerable | 2026-09-16 04:46:27.274999 |
PocketMine-MP before 5.11.1 Denial of Service via LoginPacket
HIGH (7.5)
PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties, causing the application to crash.
Published: 2026-09-09T13:31:55.512Z
Updated: 2026-10-08T15:21:12.409Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54395 |
vulnerable | 2026-09-16 04:39:34.366245 |
PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket
MEDIUM (4.3)
PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and prevent the server from processing legitimate connections.
Published: 2026-09-09T13:31:53.472Z
Updated: 2026-10-08T15:21:08.469Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54355 |
not_vulnerable | 2026-09-16 04:39:34.343831 |
PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve
HIGH (7.5)
PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPackets with keys using different curves or non-EC key types to pass login verification but trigger an uncaught exception during ECDH key derivation, crashing the server.
Published: 2026-09-09T13:31:50.013Z
Updated: 2026-10-08T15:21:04.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54390 |
not_vulnerable | 2026-09-16 04:39:34.324025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54394 |
vulnerable | 2026-09-16 04:39:34.308105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54392 |
not_vulnerable | 2026-09-16 04:39:34.233684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54396 |
vulnerable | 2026-09-16 04:39:34.213498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54393 |
not_vulnerable | 2026-09-16 04:39:34.077177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-48007 |
vulnerable | 2026-09-16 04:36:53.254369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-48006 |
vulnerable | 2026-09-16 04:36:53.253311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86202 |
vulnerable | 2026-09-16 04:32:58.926328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86203 |
vulnerable | 2026-09-16 04:32:58.745158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86198 |
vulnerable | 2026-09-16 04:32:58.638654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86201 |
vulnerable | 2026-09-16 04:32:58.607247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86204 |
vulnerable | 2026-09-16 04:32:58.589740 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86199 |
vulnerable | 2026-09-16 04:32:58.566805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86200 |
vulnerable | 2026-09-16 04:32:58.531494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51015 |
vulnerable | 2026-09-16 04:30:10.254792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51009 |
vulnerable | 2026-09-16 04:30:10.254083 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51011 |
vulnerable | 2026-09-16 04:30:10.253311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51014 |
vulnerable | 2026-09-16 04:30:10.252615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51008 |
vulnerable | 2026-09-16 04:30:10.251912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51010 |
vulnerable | 2026-09-16 04:30:10.251128 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51018 |
not_vulnerable | 2026-09-16 04:30:10.250445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51016 |
not_vulnerable | 2026-09-16 04:30:10.249730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51012 |
vulnerable | 2026-09-16 04:30:10.249031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51017 |
not_vulnerable | 2026-09-16 04:30:10.248265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-51013 |
vulnerable | 2026-09-16 04:30:10.247283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71418 |
vulnerable | 2026-09-16 04:27:03.930938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71417 |
vulnerable | 2026-09-16 04:27:03.519390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7332 |
vulnerable | 2026-06-08 06:21:57.572523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.