Lucene search
+L

85 matches found

OSV
OSV
added 2025/02/26 1:55 a.m.17 views

CVE-2022-49178 memstick/mspro_block: fix handling of read-only devices

In the Linux kernel, the following vulnerability has been resolved: memstick/msproblock: fix handling of read-only devices Use setdiskro to propagate the read-only state to the block layer instead of checking for it in -open and leaking a reference in case of a read-only device...

7.8CVSS5.2AI score
SaveExploits0References6
OSV
OSV
added 2023/12/15 3:15 p.m.13 views

CVE-2023-49178

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mr. Hdwplayer HDW Player Plugin Video Player & Video Gallery allows Reflected XSS.This issue affects HDW Player Plugin Video Player & Video Gallery: from n/a through 5.0...

6.1CVSS7.3AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/15 2:40 p.m.96 views

CVE-2023-49178

CVE-2023-49178 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin HDW Player Plugin (Video Player & Video Gallery) . The issue is caused by improper neutralization of input during web page generation, enabling a Reflected XSS. Affected software: HDW Player Plugin (Video ...

7.1CVSS7.1AI score0.00403EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/15 2:40 p.m.42 views

CVE-2023-49178 WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mr. Hdwplayer HDW Player Plugin Video Player & Video Gallery allows Reflected XSS.This issue affects HDW Player Plugin Video Player & Video Gallery: from n/a through 5.0...

7.1CVSS7.1AI score0.00403EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/11/29 12:00 a.m.22 views

WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)

Software HDW Player Plugin Video Player & Video Gallery Type Plugin Vulnerable versions = 5.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-49178 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 27d63d522c9...

7.1CVSS5.6AI score0.00403EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder