32056 matches found
MAL-2024-2819 Malicious code in @ozon-shared-deps/ozon-fe__media-player-super-lite (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2818 Malicious code in @ozon-shared-deps/ozon-fe__media-player-standard (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1849 Malicious code in @ozon-shared-deps/bx-fe__video-player (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2653 Malicious code in media-player (npm)
False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...
CVE-2024-5522
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
CVE-2024-5522
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
CVE-2024-5522
The HTML5 Video Player WordPress plugin, in versions prior to 2.5.27 , is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter from a REST route before including it in a SQL statement. This flaw allows unauthenticated users to execute arbitrary SQL queries, whi...
CVE-2024-5522: Improper Neutralization of Special Elements used in an SQL Command
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
CVE-2024-34753
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...
CVE-2024-34753
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...
CVE-2024-34753 WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...
CVE-2024-34753
CVE-2024-34753 corresponds to a Missing Authorization (Broken Access Control) vulnerability affecting WordPress Radio Player (SoftLab Radio Player). Connected sources identify the affected package as Radio Player for WordPress, with versions listed as n/a through 2.0.73. The root cause is an auth...
CVE-2024-34753 WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...
CVE-2024-34753: Missing Authorization
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...
PT-2024-6619
Name of the Vulnerable Software and Affected Versions: VLC media player versions 3.0.20 and earlier Description: The issue is related to an integer overflow in VLC media player, which could be triggered by a maliciously crafted mms stream, potentially leading to a denial of service or arbitrary...
WordPress plugin Radio Player security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
greatminds.smartplayer.video Cross Site Scripting vulnerability OBB-3934276
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...