MPD buffer error vulnerability

MPD is an individual developer's multi-link PPP daemon based on FreeBSD. A security vulnerability exists in MPD Music Player Daemon v0.23.10, which allows attackers to achieve a denial of service via crafted input data...

PT-2023-14935 · Mpd · Mpd

Name of the Vulnerable Software and Affected Versions: MPD Music Player Daemon version 0.23.10 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For MPD Music Player Daemon version 0.23.10, update to a version that contains a fix for th...

CVE-2022-46449

An issue in MPD Music Player Daemon v0.23.10 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2022-46449

An issue in MPD Music Player Daemon v0.23.10 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2022-46449

CVE-2022-46449 affects MPD (Music Player Daemon) v0.23.10. The issue allows a Denial of Service via a crafted input, as documented across multiple feeds (NVD/NVD Open, RH, OSV/OpenSUSE). The core vulnerability is in MPD’s handling of crafted input, leading to availability impact (DoS). Public exp...

PT-2023-32991 · Packagist · Pocketmine/Pocketmine-Mp

Name of the Vulnerable Software and Affected Versions: No specific software name is mentioned, but based on the context, it appears to be related to a server software, possibly a game server, with affected versions not specified. Description: The issue arises from a workaround for an old client b...

Gootkit Loader Actively Targets Australian Healthcare Industry

We analyzed the infection routine used in recent Gootkit loader attacks on the Australian healthcare industry and found that Gootkit leveraged SEO poisoning for its initial access and abused legitimate tools like VLC Media Player...

WordPress Video.js – HTML5 Video Player for WordPress Plugin <= 4.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Video.js – HTML5 Video Player for WordPress Type Plugin Vulnerable versions = 4.5.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4786 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 522c5fb94d76...

WordPress MediaElement.js – HTML5 Video & Audio Player Plugin <= 4.2.8 is vulnerable to Cross Site Scripting (XSS)

Software MediaElement.js – HTML5 Video & Audio Player Type Plugin Vulnerable versions = 4.2.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4699 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 2aa0c80da566...

CVE-2019-25086

A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerability affects the function webvtt of the file application/controllers/timedtext.php. The manipulation of the argument ttmlurl leads to cross site scripting. The attack can be...

CVE-2019-25086

A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerability affects the function webvtt of the file application/controllers/timedtext.php. The manipulation of the argument ttmlurl leads to cross site scripting. The attack can be...

Cross site scripting

A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerability affects the function webvtt of the file application/controllers/timedtext.php. The manipulation of the argument ttmlurl leads to cross site scripting. The attack can be...

CVE-2019-25086

A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerability affects the function webvtt of the file application/controllers/timedtext.php. The manipulation of the argument ttmlurl leads to cross site scripting. The attack can be...

CVE-2019-25086 IET-OU Open Media Player timedtext.php webvtt cross site scripting

A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerability affects the function webvtt of the file application/controllers/timedtext.php. The manipulation of the argument ttmlurl leads to cross site scripting. The attack can be...

CVE-2019-25086

The CVE-2019-25086 entry describes a cross-site scripting (XSS) vulnerability in IET-OU Open Media Player up to version 1.5.0, affected by the webvtt function in application/controllers/timedtext.php. Manipulating the ttml_url parameter enables remote XSS. A fix is available in version 1.5.1, wit...

Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Exploit:...

CVE-2019-25086: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerability affects the function webvtt of the file application/controllers/timedtext.php. The manipulation of the argument ttmlurl leads to cross site scripting. The attack can be...

Open Media Player Cross-site Scripting Vulnerability

Open Media Player is a mainstream audio and video player service open-sourced by the IET at the OU. A cross-site scripting vulnerability exists in versions of Open Media Player prior to 1.5.0, which stems from the fact that incorrect manipulation of the parameter ttmlurl can lead to cross-site...

melon-music-player (3.0.0a0), nxviz (0.3.5) potentially affected by CVE-2022-40897 via setuptools (38.4.0)

setuptools PYPI version 38.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - melon-music-player 3.0.0a0 - nxviz 0.3.5 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

melon-music-player (3.0.0a0), nxviz (0.3.5) potentially affected by CVE-2022-40897 via setuptools (38.4.0)

setuptools PYPI version 38.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - melon-music-player 3.0.0a0 - nxviz 0.3.5 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...