p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de transmission

Vulnerabilidad publicada para transmission en los últimos 30 días: 1. En el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 12

  1. CVE-2026-116748

    Alta · CVSS 8.7EPSS 1,25%Código de explotación públicoCorrección disponible

    Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token

    Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion.

    transmissionSistemas operativos
    • Actualiza a 4.1.3+dfsg-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  6. CVE-2018-5702

    Alta · CVSS 8.8EPSS 11,93%Código de explotación públicoCorrección disponible

    CVE-2018-5702

    Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.

    transmissionSistemas operativos
    • Actualiza a 2.92-3
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2014-4909

    Sin evaluarEPSS 5,41%Corrección disponible

    CVE-2014-4909

    Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.

    transmissionSistemas operativos
    • Actualiza a 2.84-0.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  8. CVE-2012-6129

    Sin evaluarEPSS 5,1%Corrección disponible

    CVE-2012-6129

    Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."

    transmissionSistemas operativos
    • Actualiza a 2.52-3+nmu1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  10. CVE-2010-1853

    Sin evaluarEPSS 3,78%Corrección disponible

    CVE-2010-1853

    Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted magnet URL with a large number of (1) tr or (2) ws links.

    transmissionSistemas operativos
    • Actualiza a 1.92-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →