32057 matches found
Podlove Web Player Plugin Auth Bypass
The vulnerability of the Podlove Web Player plugin in the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity and confidentiality of the protected information...
CVE-2024-29122: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Stored XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212...
WordPress FV Flowplayer Video Player Plugin <= 7.5.41.7212 is vulnerable to Cross Site Scripting (XSS)
Software FV Flowplayer Video Player Type Plugin Vulnerable versions = 7.5.41.7212 Fixed in 7.5.44.7212 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29122 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c4975faa05b5 Credits Byeongjun Jo...
ROS-2-1169
2.1169 VLC vulnerability CVE-2020-13428 1. Vulnerability description: Vulnerability in VLC 3.0.11 player The vulnerability could cause a buffer overflow in the hxxxAnnexBtoxVC function. The vulnerability potentially allows to organize attacker's code execution when playing specially formatted...
Fedora: Security Advisory for freecol (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Authorization
Missing Authorization vulnerability in Podlove Podlove Web Player.This issue affects Podlove Web Player: from n/a through 5.7.3...
CVE-2023-47691
CVE-2023-47691 is rejected and not an active vulnerability entry.
@openwebrx-js/cli (>=0.1.0, <=0.1.7), @surroundify/server (>=2.13.0, <=2.14.1) +5 more potentially affected by CVE-2024-21522 via audify (1.10.1)
audify NPM version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on audify and may be impacted: - @openwebrx-js/cli =0.1.0, =2.13.0, =0.1.0, =0.4.0, =0.5.2 Source cves: CVE-2024-21522 Source advisory: SNYK:JS-AUDIFY-6370700...
Html5 Video Player Plugin for WordPress < 2.5.25 SQL Injection
The WordPress Html5 Video Player Plugin installed on the remote host is affected by a SQL Injection via the id parameter used in the getview function which is accessible without authentication. Note that the scanner has not tested for these issues but has instead relied only on the application's...
VulnCheck KEV: CVE-2024-1061
The 'HTML5 Video Player' WordPress Plugin, version 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the 'getview' function...
CVE-2023-51689
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...
CVE-2023-51689
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...
CVE-2023-51689 WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...
CVE-2023-51689 WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...
CVE-2023-51689
CVE-2023-51689 affects the WordPress plugin Easy Video Player (naa986) up to version 1.2.2.10 with a Stored XSS vulnerability arising from improper input neutralization during web page generation. Public details identify the vulnerable component as the Easy Video Player plugin and the impact as s...
PT-2024-14244
Name of the Vulnerable Software and Affected Versions naa986 Easy Video Player versions 1.2.2.10 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can...
WordPress plugin Easy Video Player cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-51689: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...