Lucene search
+L

662 matches found

Vulnrichment
Vulnrichment
added 2024/12/31 1:21 p.m.6 views

CVE-2024-56203 WordPress Wayne Audio Player plugin <= 1.0 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in gholme4 Wayne Audio Player wayne-audio-player allows Privilege Escalation.This issue affects Wayne Audio Player: from n/a through = 1.0...

8.8CVSS7.2AI score0.00234EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.7 views

WordPress plugin Wayne Audio Player 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS8.2AI score0.00234EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/31 12:00 a.m.22 views

PT-2024-36738 · Unknown · George Holmes Ii Wayne Audio Player

Name of the Vulnerable Software and Affected Versions: George Holmes II Wayne Audio Player versions n/a through 1.0 Description: A Cross-Site Request Forgery CSRF issue is present in the George Holmes II Wayne Audio Player, allowing Privilege Escalation. This can lead to unauthorized actions bein...

8.8CVSS9.5AI score0.00234EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2024/12/30 4:46 p.m.11 views

WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 5.8...

8.8CVSS7AI score0.00327EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/18 7:21 p.m.6 views

WordPress Wayne Audio Player plugin <= 1.0 - CSRF to Privilege Escalation vulnerability

CSRF to Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Wayne Audio Player versions = 1.0...

8.8CVSS7AI score0.00234EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2024/12/17 7:55 p.m.17 views

Moderate: Red Hat Security Advisory: mpg123:1.32.9 security update

An update for the mpg123:1.32.9 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

6.7CVSS6.7AI score0.00349EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/12/17 7:04 p.m.15 views

Moderate: Red Hat Security Advisory: mpg123 security update

An update for mpg123 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

6.7CVSS6.7AI score0.00349EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
added 2024/12/17 12:00 a.m.17 views

Moderate: mpg123 security update

The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 most commonly MPEG 1.0 layer 3 also known as MP3, as well as re-usable decoding and output libraries. Security Fixes: mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 For more...

6.7CVSS7.1AI score0.00349EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/12/17 12:00 a.m.17 views

Moderate: mpg123:1.32.9 security update

The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 most commonly MPEG 1.0 layer 3 also known as MP3, as well as re-usable decoding and output libraries. Security Fixes: mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 For more...

6.7CVSS7.1AI score0.00349EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/17 12:00 a.m.15 views

ALSA-2024:11242 Moderate: mpg123:1.32.9 security update

The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 most commonly MPEG 1.0 layer 3 also known as MP3, as well as re-usable decoding and output libraries. Security Fixes: mpg123: Buffer overflow when writing decoded PCM samples CVE-2024-10573 For more...

6.7CVSS6.6AI score0.00349EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/12/09 11:30 a.m.27 views

CVE-2023-47822 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10...

5.4CVSS0.0042EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.15 views

CVE-2023-47822 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10...

5.4CVSS6.9AI score0.0042EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.14 views

WordPress plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS8.5AI score0.0042EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2024/11/27 12:46 p.m.238 views

USN-7092-2: mpg123 vulnerability

USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucariès discovered that the fix was incomplete on Ubuntu 20.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that mpg123 incorrectly handled certain mp3 files. If a user or...

6.7CVSS7AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/19 8:15 a.m.18 views

CVE-2024-10268

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...

6.4CVSS0.00342EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/19 8:15 a.m.8 views

CVE-2024-10268

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...

5.4CVSS7.4AI score0.00342EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/19 7:35 a.m.67 views

CVE-2024-10268

CVE-2024-10268 – MP3 Audio Player by Sonaar (WordPress) Vulnerability type: Stored Cross-Site Scripting (XSS) via the shortcode sonaar_audioplayer. Root cause: insufficient input sanitization and output escaping on user-supplied shortcode attributes. Affected software: WordPress plugin MP3 Audio ...

6.4CVSS5.7AI score0.00342EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.9 views

WordPress plugin MP3 Audio Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.4CVSS7.5AI score0.00342EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/18 10:15 p.m.31 views

CVE-2024-52348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Extensions AA Audio Player aa-audio-player allows DOM-Based XSS.This issue affects AA Audio Player: from n/a through = 1.0...

6.5CVSS0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/18 9:41 p.m.37 views

CVE-2024-52348 WordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Extensions AA Audio Player aa-audio-player allows DOM-Based XSS.This issue affects AA Audio Player: from n/a through = 1.0...

6.5CVSS0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder