Threat database

5 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.4%	CVE-2025-59563Sonaar · Incorrect Privilege Assignment High8.8EPSS 0.4%2026-06-17CVE Database V5CVE-2025-59563 Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions. EPSS 0.4%Vulnerability SONAAR MUSIC #cwe-266	CVE Database V5	2026-06-17
High	7.1	EPSS 0.2%	CVE-2025-59560Sonaar · Cross-site Scripting High7.1EPSS 0.2%2026-06-17CVE Database V5CVE-2025-59560 CVE-2025-59560 is a high severity vulnerability in Sonaar music software versions up to and including 4.27.4. It is an unauthenticated cross-site scripting (XSS) flaw that allows improper neutralization of input during web page generation. This vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected system. No official patch or remediation guidance is currently provided by the vendor. EPSS 0.2%Vulnerability SONAAR MUSIC #cwe-79	CVE Database V5	2026-06-17
High	7.5	EPSS 0.6%	CVE-2024-31343MP3 Audio Player for Music, Radio & Podcast by Sonaar · Missing Authorization High7.5EPSS 0.6%2024-04-10CVE Database V5CVE-2024-31343 Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1. EPSS 0.6%Vulnerability Sonaar Music #cwe-862	CVE Database V5	2024-04-10
Medium	6.5	EPSS 0.3%	CVE-2024-30530MP3 Audio Player for Music, Radio & Podcast by Sonaar · Cross-site Scripting Medium6.5EPSS 0.3%2024-03-31CVE Database V5CVE-2024-30530 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1. EPSS 0.3%Vulnerability Sonaar Music #cwe-79	CVE Database V5	2024-03-31
High	7.6	EPSS 0.5%	CVE-2024-30487MP3 Audio Player for Music, Radio & Podcast by Sonaar · Missing Authorization High7.6EPSS 0.5%2024-03-29CVE Database V5CVE-2024-30487 Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1. EPSS 0.5%Vulnerability Sonaar Music #cwe-862	CVE Database V5	2024-03-29

Showing 1–5 of 5 results