nullsoft shoutcast server

Name: nullsoft shoutcast server
Brand: nullsoft

productUS

cpe:2.3:a:nullsoft:shoutcast_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high3medium2low

updated 2026-10-27

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2004-1373US	high7.5	70.1% (99th)	Exploit	no fix	2004-12-23	= 1.9.4
CVE-2002-0907US	high7.5	5.63% (93rd)	Exploit	no fix	2002-10-04	= 1.8.9
CVE-2007-1229US	medium4.3	1.83% (79th)	Exploit	no fix	2007-03-02	= 1.9.7
CVE-2003-1174US	low2.1	1.16% (67th)	Exploit	no fix	2003-12-31	= 1.9.2
CVE-2002-0199US	high7.5	3.36% (89th)	—	no fix	2002-05-16	= 1.8.3
CVE-2006-3534US	high7.8	2.54% (85th)	—	no fix	2006-07-12	8 versions
CVE-2006-3007US	medium4.3	2.04% (81st)	—	no fix	2006-06-13	6 versions
CVE-2001-1304US	medium5.0	1.93% (80th)	—	no fix	2001-08-03	= 1.8.2
CVE-2002-1470US	low2.1OT elevated	0.48% (41st)	—	no fix	2003-04-22	= 1.8.9
CVE-1999-1561US	high7.2OT elevated	0.34% (28th)	—	no fix	1999-08-20	= 1.9.7

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-134Use of Externally-Controlled Format String1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-256Plaintext Storage of a Password1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.